Skip to content
OpenAdvisories

Vendor

stevejburge

9 known vulnerabilities.

stevejburge at a glance

Last 12 months
4
Critical · all time
0
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 3 5 December 2025: 3 vulnerabilities Dec 2025 January 2026: 1 vulnerability February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202610
Dec 202530
Nov 202510
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI 9
All Critical High Medium Low Exploited only Public exploit

9 results · Feed

  • Medium 4.3
    CVE-2025-14371

    TaxoPress <= 3.41.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Tag Modification

    The Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the taxopress_ai_add_post_term function in all versions up to, and including, 3.41…

    stevejburge Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI Web / CMS
  • Medium 6.5
    CVE-2025-13922

    Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI <= 3.40.1 - Authenticated (Contributor+) SQL Injection via ORDER BY Clause

    The Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'existing_terms_orderby' parameter in the AI preview AJAX endpoint in all versions up to, and including, 3.40.1. T…

    stevejburge Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI Web / CMS
  • Medium 6.5
    CVE-2025-13359

    Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI <= 3.40.1 - Authenticated (Contributor+) SQL Injection

    The Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI plugin for WordPress is vulnerable to time-based SQL Injection via the "getTermsForAjax" function in all versions up to, and including, 3.40.1. This is due to insufficient escaping on the use…

    stevejburge Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI Web / CMS
  • Medium 4.3
    CVE-2025-13354

    Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI <= 3.40.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Taxonomy Term Manipulation

    The Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.40.1. This is due to the plugin not properly verifying that a user is authorized to perform …

    stevejburge Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI Web / CMS
  • Medium 4.9
    CVE-2025-11972

    Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI <= 3.40.0 - Authenticated (Editor+) SQL Injection

    The Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI plugin for WordPress is vulnerable to SQL Injection via the 'post_types' parameter in all versions up to, and including, 3.40.0 due to insufficient escaping on the user supplied parameter and…

    stevejburge Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI Web / CMS
  • Medium 6.4
    CVE-2024-2830

    WordPress Tag and Category Manager – AI Autotagger <= 3.13.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    The WordPress Tag and Category Manager – AI Autotagger plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'st_tag_cloud' shortcode in all versions up to, and including, 3.13.0 due to insufficient input sanitization and output e…

    stevejburge Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI Web / CMS
  • Medium 5.5
    CVE-2023-2170

    TaxoPress <= 3.6.4 - Authenticated (Editor+) Stored Cross-Site Scripting

    The TaxoPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Related Posts functionality in versions up to, and including, 3.6.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated at…

    stevejburge Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI Web / CMS
  • Medium 5.5
    CVE-2023-2169

    TaxoPress <= 3.6.4 - Authenticated (Editor+) Stored Cross-Site Scripting

    The TaxoPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Related Posts functionality in versions up to, and including, 3.6.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated at…

    stevejburge Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI Web / CMS
  • Medium 5.5
    CVE-2023-2168

    TaxoPress <= 3.6.4 - Authenticated (Editor+) Stored Cross-Site Scripting

    The TaxoPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Suggest Terms Title field in versions up to, and including, 3.6.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated atta…

    stevejburge Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI Web / CMS