Tag, Category, and Taxonomy Manager – Autotagger Automatically Add Terms

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Tag, Category, and Taxonomy Manager – Autotagger Automatically Add Terms

Information

Software Type Plugin
Software Slug simple-tags (view on wordpress.org)
Software Status Active
Software Author stevejburge
Software Website wordpress.org
Software Downloads 5,961,585
Software Active Installs 40,000
Software Record Last Updated July 22, 2026

14 Vulnerabilities

Submit a Vulnerability
TaxoPress <= 3.44.0 - Authenticated (Editor+) SQL Injection
4.9
CVE-2026-42646
Mar 22, 2026
Researcher: timomangcut
TaxoPress <= 3.41.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Tag Modification
4.3
CVE-2025-14371
Jan 5, 2026
Researcher: Dmitrii Ignatyev
Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI <= 3.40.1 - Authenticated (Contributor+) SQL Injection via ORDER BY Clause
6.5
CVE-2025-13922
Dec 5, 2025
Researcher: Dmitrii Ignatyev
Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI <= 3.40.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Taxonomy Term Manipulation
4.3
CVE-2025-13354
Dec 3, 2025
Researcher: type5afe
Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI <= 3.40.1 - Authenticated (Contributor+) SQL Injection
6.5
CVE-2025-13359
Dec 3, 2025
Researcher: type5afe
Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI <= 3.40.0 - Authenticated (Editor+) SQL Injection
4.9
CVE-2025-11972
Nov 7, 2025
Researcher: Naoya Takahashi (nakko)
Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI <= 3.37.2 - Authenticated (Subscriber+) Information Exposure
4.3
CVE-2025-55710
Aug 14, 2025
Researcher: Que Thanh Tuan - Blue Rock
WordPress Tag, Category, and Taxonomy Manager – AI Autotagger <= 3.32.0 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2025-0627
Apr 7, 2025
Researcher: Dmitrii Ignatyev
WordPress Tag and Category Manager – AI Autotagger <= 3.13.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
6.4
CVE-2024-2830
Apr 3, 2024
Researcher: stealthcopter
TaxoPress <= 3.6.4 - Authenticated (Editor+) Stored Cross-Site Scripting
5.5
CVE-2023-2168
Apr 18, 2023
Researcher: Ivan Kuzymchak
TaxoPress <= 3.6.4 - Authenticated (Editor+) Stored Cross-Site Scripting
5.5
CVE-2023-2169
Apr 18, 2023
Researcher: Ivan Kuzymchak
TaxoPress <= 3.6.4 - Authenticated (Editor+) Stored Cross-Site Scripting
5.5
CVE-2023-2170
Apr 18, 2023
Researcher: Ivan Kuzymchak
TaxoPress <= 3.4.4 - Reflected Cross-Site Scripting
6.1
CVE ID Unknown
Feb 7, 2022
Researcher: WPScanTeam
TaxoPress <= 3.0.7.1 - Stored Cross-Site Scripting
5.5
CVE-2021-24444
Jun 30, 2021
Researcher: Akash Rajendra Patil
Title Status CVE ID CVSS Researchers Date
TaxoPress <= 3.44.0 - Authenticated (Editor+) SQL Injection Patched CVE-2026-42646 4.9 timomangcut March 22, 2026
TaxoPress <= 3.41.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Tag Modification Patched CVE-2025-14371 4.3 Dmitrii Ignatyev January 5, 2026
Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI <= 3.40.1 - Authenticated (Contributor+) SQL Injection via ORDER BY Clause Patched CVE-2025-13922 6.5 Dmitrii Ignatyev December 5, 2025
Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI <= 3.40.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Taxonomy Term Manipulation Patched CVE-2025-13354 4.3 type5afe December 3, 2025
Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI <= 3.40.1 - Authenticated (Contributor+) SQL Injection Patched CVE-2025-13359 6.5 type5afe December 3, 2025
Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI <= 3.40.0 - Authenticated (Editor+) SQL Injection Patched CVE-2025-11972 4.9 Naoya Takahashi (nakko) November 7, 2025
Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI <= 3.37.2 - Authenticated (Subscriber+) Information Exposure Patched CVE-2025-55710 4.3 Que Thanh Tuan - Blue Rock August 14, 2025
WordPress Tag, Category, and Taxonomy Manager – AI Autotagger <= 3.32.0 - Authenticated (Admin+) Stored Cross-Site Scripting Patched CVE-2025-0627 4.4 Dmitrii Ignatyev April 7, 2025
WordPress Tag and Category Manager – AI Autotagger <= 3.13.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Patched CVE-2024-2830 6.4 stealthcopter April 3, 2024
TaxoPress <= 3.6.4 - Authenticated (Editor+) Stored Cross-Site Scripting Patched CVE-2023-2168 5.5 Ivan Kuzymchak April 18, 2023
TaxoPress <= 3.6.4 - Authenticated (Editor+) Stored Cross-Site Scripting Patched CVE-2023-2169 5.5 Ivan Kuzymchak April 18, 2023
TaxoPress <= 3.6.4 - Authenticated (Editor+) Stored Cross-Site Scripting Patched CVE-2023-2170 5.5 Ivan Kuzymchak April 18, 2023
TaxoPress <= 3.4.4 - Reflected Cross-Site Scripting Patched 6.1 WPScanTeam February 7, 2022
TaxoPress <= 3.0.7.1 - Stored Cross-Site Scripting Patched CVE-2021-24444 5.5 Akash Rajendra Patil June 30, 2021

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation