WordPress plugin
PublishPress Taxonomies – Tag, Category, and Taxonomy Manager – Autotagger Automatically Add Terms security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 16 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium16
- Low0
All PublishPress Taxonomies – Tag, Category, and Taxonomy Manager – Autotagger Automatically Add Terms vulnerabilities
- Medium6.6Authenticated (Editor+) PHP Object Injection
≤3.51.0Update to 3.52.0
- Medium4.3Insecure Direct Object Reference to Authenticated (Contributor+) Private Post Disclosure
≤3.50.0Update to 3.51.0
- Medium4.9Authenticated (Editor+) SQL Injection
≤3.44.0Update to 3.45.0
- Medium4.3Missing Authorization to Authenticated (Contributor+) Arbitrary Post Tag Modification
≤3.41.0Update to 3.42.0
- Medium6.5Authenticated (Contributor+) SQL Injection via ORDER BY Clause
≤3.40.1Update to 3.41.0
- Medium4.3Missing Authorization to Authenticated (Subscriber+) Arbitrary Taxonomy Term Manipulation
≤3.40.1Update to 3.41.0
- Medium6.5Authenticated (Contributor+) SQL Injection
≤3.40.1Update to 3.41.0
- Medium4.9Authenticated (Editor+) SQL Injection
≤3.40.0Update to 3.40.1
- Medium4.3Authenticated (Subscriber+) Information Exposure
≤3.37.2Update to 3.37.3
- Medium4.4Authenticated (Admin+) Stored Cross-Site Scripting
≤3.32.0Update to 3.33.0
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
≤3.12.0Update to 3.20.0
- Medium5.5Authenticated (Editor+) Stored Cross-Site Scripting
≤3.6.4Update to 3.6.5
- Medium5.5Authenticated (Editor+) Stored Cross-Site Scripting
≤3.6.4Update to 3.6.5
- Medium5.5Authenticated (Editor+) Stored Cross-Site Scripting
≤3.6.4Update to 3.6.5
- Medium6.1Reflected Cross-Site Scripting
≤3.4.4Update to 3.4.5
- Medium5.5Stored Cross-Site Scripting
≤3.0.7.1Update to 3.0.7.2
PublishPress Taxonomies – Tag, Category, and Taxonomy Manager – Autotagger Automatically Add Terms: common questions
Does PublishPress Taxonomies – Tag, Category, and Taxonomy Manager – Autotagger Automatically Add Terms have known vulnerabilities?
Yes. VulnCrest Radar lists 16 known vulnerabilities in PublishPress Taxonomies – Tag, Category, and Taxonomy Manager – Autotagger Automatically Add Terms: 16 medium. None are known to affect version null.
How do I check which version of PublishPress Taxonomies – Tag, Category, and Taxonomy Manager – Autotagger Automatically Add Terms I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent PublishPress Taxonomies – Tag, Category, and Taxonomy Manager – Autotagger Automatically Add Terms vulnerability?
CVE-2026-74012, published Aug 19, 2026: Tag, Category, and Taxonomy Manager – Autotagger Automatically Add Terms <= 3.51.0 - Authenticated (Editor+) PHP Object Injection. Severity: Medium (CVSS 6.6).
Is any PublishPress Taxonomies – Tag, Category, and Taxonomy Manager – Autotagger Automatically Add Terms vulnerability listed in CISA KEV?
No. None of the known PublishPress Taxonomies – Tag, Category, and Taxonomy Manager – Autotagger Automatically Add Terms vulnerabilities is currently listed in the CISA KEV catalog.