Medium · 5.4 CVE-2023-48282 EUVD-2023-52349GHSA-2mv4-pxp2-cp34

WordPress Taxonomy filter Plugin <= 2.2.9 is vulnerable to Cross Site Request Forgery (CSRF)

Published Nov 30, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Andrea Landonio Product: Taxonomy filter

Description

Cross-Site Request Forgery (CSRF) vulnerability in Andrea Landonio Taxonomy filter allows Cross Site Request Forgery.This issue affects Taxonomy filter: from n/a through 2.2.9.

Affected products

Vendor	Product	Affected	Fixed
Andrea Landonio	Taxonomy filter	≤ 2.2.9	—

References

https://patchstack.com/database/vulnerability/taxonomy-filter/wordpress-taxonomy-filter-plugin-2-2-9-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry