Sstevejburge

Products

Exploited and recent CVEs

• CVE-2025-14371 Medium 4.3 TaxoPress <= 3.41.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Tag Modification 0.2%
• CVE-2025-13922 Medium 6.5 Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI <= 3.40.1 - Authenticated (Contributor+) SQL Injection via ORDER BY Clause 0.3%
• CVE-2025-13359 Medium 6.5 Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI <= 3.40.1 - Authenticated (Contributor+) SQL Injection 0.4%
• CVE-2025-13354 Medium 4.3 Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI <= 3.40.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Taxonomy Term Manipulation 0.3%
• CVE-2025-11972 Medium 4.9 Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI <= 3.40.0 - Authenticated (Editor+) SQL Injection 0.3%
• CVE-2022-4974 Medium 6.3 Freemius SDK <= 2.4.2 - Missing Authorization Checks 0.4%
• CVE-2024-2830 Medium 6.4 WordPress Tag and Category Manager – AI Autotagger <= 3.13.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.4%
• CVE-2023-2170 Medium 5.5 TaxoPress <= 3.6.4 - Authenticated (Editor+) Stored Cross-Site Scripting 0.5%
• CVE-2023-2169 Medium 5.5 TaxoPress <= 3.6.4 - Authenticated (Editor+) Stored Cross-Site Scripting 0.5%
• CVE-2023-2168 Medium 5.5 TaxoPress <= 3.6.4 - Authenticated (Editor+) Stored Cross-Site Scripting 0.5%