Radio Buttons for Taxonomies
Radio Buttons for Taxonomies has one disclosed vulnerability in the WordSec catalog, all reported in 2020; it is fixed as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).
The one issue recorded for Radio Buttons for Taxonomies has a vendor fix available, so running the current release closes it.
All of these findings were reported by Jerome Bruandet. Radio Buttons for Taxonomies is installed on roughly 20,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.0.
CVE-2020-36740Radio Buttons for Taxonomies <= 2.0.5 - Cross-Site Request Forgery Bypass
Read the full analysisVulnerability Records
Radio Buttons for Taxonomies
Author
HelgaTheViking
Replace the default taxonomy boxes with a custom metabox that uses radio buttons… effectively limiting each post to a single term in that taxonomy. A plugin options page allows the user can select which taxonomies she’d like to switch to using the custom radio-button style metabox. Originally based on the the class by Stephen Harris Support Support is handled in the WordPress forums. Please note that support is limited and does not cover any custom implementation of the plugin. Before posting a question, read the FAQ and confirm that the problem still exists with a default theme and with all other plugins disabled. Please report any bugs, errors, warnings, code problems to Github
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C