Require & Limit Categories, Tags, Featured Image and taxonomies

Require & Limit Categories, Tags, Featured Image and taxonomies has one disclosed vulnerability in the WordSec catalog, all reported in 2022; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Require & Limit Categories, Tags, Featured Image and taxonomies has a vendor fix available, so running the current release closes it.

All of these findings were reported by WPScanTeam. Require & Limit Categories, Tags, Featured Image and taxonomies is installed on roughly 20 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.5.10.

Strategic Overview

Avg CVSSMedium
6.1/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Require & Limit Categories, Tags, Featured Image and taxonomies vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1

Require & Limit Categories, Tags, Featured Image and taxonomies <= 1.26 - Reflected Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
Require & Limit Categories, Tags, Featured Image and taxonomies banner
Latestv1.30

Require & Limit Categories, Tags, Featured Image and taxonomies

Puvox Software

Author

Puvox Software

5.0(2)
100/100
Last Updated
2024-10-30 (2y ago)
Active Installs
20+
Downloads
2,505
Requires WP
6.0+
Requires PHP
0+
Tested up to
WP 6.5.10
Created
2019-01-03 (8y ago)

[ ✅ 𝐒𝐄𝐂𝐔𝐑𝐄 𝐏𝐋𝐔𝐆𝐈𝐍𝐒 b𝓎 𝒫𝓊𝓋𝑜𝓍] : • Revised for security to be reliable and free of vulnerability holes. • Efficient, not to add any extra load/slowness to site. • Don’t collect private data. Plugin Description Force dashboard users to select chosen fields during publishing. You can force users to insert/choose category, tag (or specific taxonomy) or Featured Image (a.k.a. thumbnails) when they publish any post. You can also limit maximum allowed tags/categories to be chosen. Programatical hooks: to change the $args passed to javascript handler: add_filter(“rtict_javascript_object”, “your_func”); function your_func($args) { … } to change the javascript handler’s error-output callback, define this in global JS scope: function rtict_error_handler(args) { // … console.log(args); } Available Options See all available options and their description on plugin’s settings page.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C