A popular plugin for WordPress that helps organize tags, categories, and taxonomy is at risk for unauthorized access. This means that someone without proper permission can merge or delete any terms they want. This vulnerability affects all versions of the plugin up to 3.40.1. If you have subscriber level access or higher, you could potentially exploit this vulnerability.
This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!
Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:
> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21
Is this information incorrect? Please leave us a message.
