Require & Limit Categories, Tags, Featured Image and taxonomies
Require & Limit Categories, Tags, Featured Image and taxonomies has one disclosed vulnerability in the WordSec catalog, all reported in 2022; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Require & Limit Categories, Tags, Featured Image and taxonomies has a vendor fix available, so running the current release closes it.
All of these findings were reported by WPScanTeam. Require & Limit Categories, Tags, Featured Image and taxonomies is installed on roughly 20 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.5.10.
Require & Limit Categories, Tags, Featured Image and taxonomies <= 1.26 - Reflected Cross-Site Scripting
Read the full analysisVulnerability Records

Require & Limit Categories, Tags, Featured Image and taxonomies
Author
Puvox Software
[ ✅ 𝐒𝐄𝐂𝐔𝐑𝐄 𝐏𝐋𝐔𝐆𝐈𝐍𝐒 b𝓎 𝒫𝓊𝓋𝑜𝓍] : • Revised for security to be reliable and free of vulnerability holes. • Efficient, not to add any extra load/slowness to site. • Don’t collect private data. Plugin Description Force dashboard users to select chosen fields during publishing. You can force users to insert/choose category, tag (or specific taxonomy) or Featured Image (a.k.a. thumbnails) when they publish any post. You can also limit maximum allowed tags/categories to be chosen. Programatical hooks: to change the $args passed to javascript handler: add_filter(“rtict_javascript_object”, “your_func”); function your_func($args) { … } to change the javascript handler’s error-output callback, define this in global JS scope: function rtict_error_handler(args) { // … console.log(args); } Available Options See all available options and their description on plugin’s settings page.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C