Skip to content
Sign in
2.7 Low

CVE-2026-15231 The Tag, Category, and Taxonomy Manager WordPress plugin before 3.51.0 does not verify that a user is authorized to…

Description

The Tag, Category, and Taxonomy Manager WordPress plugin before 3.51.0 does not verify that a user is authorized to access a referenced post before processing it and returning derived data, allowing users with contributor privileges to disclose data from private or draft posts they do not own.

Affected products and versions

Product Affected versions Fixed in
Tag, Category, and Taxonomy Manager 3.51 earliest → < 3.51.0 3.51.0
Track this CVE