Access violation vulnerability in TaxoPress: Tag, Category, and Taxonomy Manager – AI Autotagger 3.41.0

The tool used to manage tags, categories, and taxonomies in WordPress, called AI Autotagger with OpenAI plugin, has a security flaw that allows unauthorized changes to be made to the data. This is because it does not have a check in place to ensure that only certain users have the ability to make changes. This means that anyone with at least Contributor-level access can add or remove tags and categories from any post, even if they didn’t create the post themselves.