Multi-column Tag Map

Multi-column Tag Map has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; 3 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 5.4, and the most serious one scores 6.4 out of 10. 2023 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 3 of the records (75%). Other recurring categories include Cross-Site Request Forgery (CSRF).

3 of the records (75%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2026.

4 independent researchers contributed these findings, one record each.

01234567891002.02.2023Today02.02.20236.4Multi-column Tag Map <= 17.0.24 - Authenticated (Contributor+) Stored Cross Site Scripting CVSS 6.4 · 02.02.202301.09.20234.3Multi-column Tag Map <= 17.0.26 - Cross-Site Request Forgery CVSS 4.3 · 01.09.202320.12.20246.4Multi-column Tag Map <= 17.0.33 - Authenticated (Contributor+) Stored Cross-Site Scripting via mctagmap Shortcode CVSS 6.4 · 20.12.202406.01.20264.4Multi-column Tag Map <= 17.0.39 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'mctm_css_conditional' Parameter CVSS 4.4 · 06.01.2026

Strategic Overview

Avg CVSSMedium
5.4/ 10
Patch Coverage75%
Open

1

Fixed

3

Get automatic notifications for all Multi-column Tag Map vulnerabilities before they are exploited.

Most severe open issueCVSS 4.4CVE-2025-14057

Multi-column Tag Map <= 17.0.39 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'mctm_css_conditional' Parameter

Read the full analysis

Vulnerability Records

4 records
Showing 1–4 of 4 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C