Auto Tag Creator – Automatic Tags for Posts and WooCommerce Products
Auto Tag Creator – Automatic Tags for Posts and WooCommerce Products has one disclosed vulnerability in the WordSec catalog, all reported in 2023; it is fixed as of October 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.
The most common weakness is Missing Authorization, behind 1 of the records (100%).
The one issue recorded for Auto Tag Creator – Automatic Tags for Posts and WooCommerce Products has a vendor fix available, so running the current release closes it.
All of these findings were reported by Abdi Pranata. Auto Tag Creator – Automatic Tags for Posts and WooCommerce Products is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.
CVE-2023-47523Auto Tag Creator <= 1.0.2 - Missing Authorization via tag_save_settings_callback
Read the full analysisVulnerability Records

Auto Tag Creator – Automatic Tags for Posts and WooCommerce Products
Author
Ecreate Infotech
Auto Tag Creator is an automatic tagging plugin for WordPress posts and WooCommerce products. It works as a tag generator: when you publish or update an item, it takes the words from its title and category names and saves them as post tags or product tags. You decide which words to skip, how long a word must be, and how many tags each item gets. If you have ever published a post and forgotten the tags, or inherited a site with thousands of untagged products, this does the tagging for you and can tag everything you have already published in bulk. It is a good fit for blogs, news sites, community sites and online stores where content is added often and tags are easy to forget. Features Creates tags from post and product titles. Creates tags from post and product category names. Title and category tagging can be turned on or off separately for posts and products. Works with the block editor, the classic editor, Quick Edit and scheduled posts. Works with WooCommerce products, including products added through the WooCommerce REST API, CSV imports and other plugins. Skips common English words such as “the”, “and”, “for” and “with”. Your own list of words to ignore. Minimum word length, so short words are not turned into tags. Maximum number of new tags per post or product. Tag letter case: keep words as written, use lowercase, or use Title Case. Option to replace existing tags or keep them and add new ones. Bulk tagging for posts and products that are already published, with a progress bar. Settings are kept when the plugin is deactivated and removed only when the plugin is deleted. How it works Say you publish a post titled “Easy Tomato Soup Recipe” in the category “Healthy Food”. With the default settings, the post gets these tags: Easy, Tomato, Soup, Recipe, Healthy and Food. Common words and words shorter than the minimum length are skipped. Need it for other post types? Auto Tag Creator works with posts and WooCommerce products. If you need the same feature for a custom post type, or any other custom WordPress work, please contact us.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C