Input validation vulnerability in WordPress Tag and Category Manager – AI Autotagger 3.12.0

The WordPress Tag and Category Manager plugin, called AI Autotagger, has a security issue that could allow hackers to insert harmful code into a website. This can happen when the plugin’s ‘st_tag_cloud’ shortcode is used, and affects all versions up to 3.13.0. This could happen because the plugin does not properly clean up the information that is entered by users, and it also doesn’t protect against dangerous code. This means that someone who has contributor-level access or higher could add code to a page that will run whenever someone visits it.