Map Categories to Pages
Map Categories to Pages has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 4.4, and the most serious one scores 4.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Map Categories to Pages has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by Nabil Irawan. Map Categories to Pages is installed on roughly 700 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 3.4.2.
CVE-2025-60146Map Categories to Pages <= 1.3.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records
Map Categories to Pages
Author
Amit Verma
Updates in version 1.3.2: 1. Added pagination in auto-insertion. Number of posts per page are be displayed from “Blog pages show at most” settings from “Reading” option page. Use following CSS classes to change styles. .navigation .alignleft .alignright Updates in version 1.3.1: 1. Exclude Category IDs option on Widget. Updates in version 1.3: 1. Widget to display pages from the Page’s category. Updates in version 1.2.3: 1. Bug fixes. 2. Display categories on Edit Pages page. Updates in version 1.2.2: 1. Do not auto-insert posts if the Page isn’t mapped to any Category. It used to insert all the posts if the Page isn’t mapped to any Category. Updates in version 1.2.1: 1. Improved compatibility with Menus in WordPress 3. Thanks to Joe http://joesutthoff.com Updates in version 1.2: 1. Compatible with WordPress 3 Updates in version 1.1: 1. Option for auto-insertion of the Pages on Category pages 2. Option for auto-insertion of Posts on the Pages which belong to the same category Map Categories to Pages displays the category box on the “Edit Page” page. By default, Every page in wordpress is mapped to the default category but this plugin gives the option to select categories for a pages. This plugin uses the same category box which displays on the edit post page from the core of WP. It is useful when you want to display posts from certain categories on the pages. You will have to edit your page template to encorporate categories. Follow the standard wordpress categories syntex used for posts. Take a look at https://codex.wordpress.org/Function_Reference/get_the_category and https://codex.wordpress.org/Template_Tags/the_category.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C