PublishPress Taxonomies – Tag, Category, and Taxonomy Manager – Autotagger Automatically Add Terms

PublishPress Taxonomies – Tag, Category, and Taxonomy Manager – Autotagger Automatically Add Terms has 16 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2026; all 16 are fixed as of October 2026. Their average CVSS score is 5.3, and the most serious one scores 6.6 out of 10. 2025 was the busiest year with 6 disclosures.

The most common weakness is Cross-Site Scripting, behind 7 of the records (44%). Other recurring categories include SQL Injection, Missing Authorization.

Every one of the 16 issues recorded for PublishPress Taxonomies – Tag, Category, and Taxonomy Manager – Autotagger Automatically Add Terms has a vendor fix available, so running the current release closes all known holes.

11 independent researchers contributed these findings, most of them (3) reported by Dmitrii Ignatyev. PublishPress Taxonomies – Tag, Category, and Taxonomy Manager – Autotagger Automatically Add Terms is installed on roughly 40,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.

01234567891010.10.2007Today30.06.20215.5TaxoPress <= 3.0.7.1 - Stored Cross-Site Scripting CVSS 5.5 · 30.06.202107.02.20226.1TaxoPress <= 3.4.4 - Reflected Cross-Site Scripting CVSS 6.1 · 07.02.202218.04.20235.5TaxoPress <= 3.6.4 - Authenticated (Editor+) Stored Cross-Site Scripting CVSS 5.5 · 18.04.20235.5TaxoPress <= 3.6.4 - Authenticated (Editor+) Stored Cross-Site Scripting CVSS 5.5 · 18.04.20235.5TaxoPress <= 3.6.4 - Authenticated (Editor+) Stored Cross-Site Scripting CVSS 5.5 · 18.04.202303.04.20246.4WordPress Tag and Category Manager – AI Autotagger <= 3.13.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVSS 6.4 · 03.04.202407.04.20254.4WordPress Tag, Category, and Taxonomy Manager – AI Autotagger <= 3.32.0 - Authenticated (Admin+) Stored Cross-Site Scripting CVSS 4.4 · 07.04.202514.08.20254.3Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI <= 3.37.2 - Authenticated (Subscriber+) Information Exposure CVSS 4.3 · 14.08.202507.11.20254.9Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI <= 3.40.0 - Authenticated (Editor+) SQL Injection CVSS 4.9 · 07.11.202503.12.20256.5Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI <= 3.40.1 - Authenticated (Contributor+) SQL Injection CVSS 6.5 · 03.12.20254.3Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI <= 3.40.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Taxonomy Term Manipulation CVSS 4.3 · 03.12.202505.12.20256.5Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI <= 3.40.1 - Authenticated (Contributor+) SQL Injection via ORDER BY Clause CVSS 6.5 · 05.12.202505.01.20264.3TaxoPress <= 3.41.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Tag Modification CVSS 4.3 · 05.01.202622.03.20264.9TaxoPress <= 3.44.0 - Authenticated (Editor+) SQL Injection CVSS 4.9 · 22.03.202624.07.20264.3TaxoPress <= 3.50.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Private Post Disclosure CVSS 4.3 · 24.07.202619.08.20266.6Tag, Category, and Taxonomy Manager – Autotagger Automatically Add Terms <= 3.51.0 - Authenticated (Editor+) PHP Object Injection CVSS 6.6 · 19.08.2026

Strategic Overview

Avg CVSSMedium
5.3/ 10
Patch Coverage100%
Open

0

Fixed

16

Get automatic notifications for all PublishPress Taxonomies – Tag, Category, and Taxonomy Manager – Autotagger Automatically Add Terms vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.6CVE-2026-74012

Tag, Category, and Taxonomy Manager – Autotagger Automatically Add Terms <= 3.51.0 - Authenticated (Editor+) PHP Object Injection

Read the full analysis

Vulnerability Records

16 records
2026-08-19 00:00CVE-2026-74012
6.6
Medium
darooYes
2026-07-24 00:00CVE-2026-15231
4.3
Medium
Duy TranYes
2026-03-22 00:00CVE-2026-42646
4.9
Medium
timomangcutYes
2026-01-05 19:03CVE-2025-14371
4.3
Medium
Dmitrii IgnatyevYes
2025-12-05 16:26CVE-2025-13922
6.5
Medium
Dmitrii IgnatyevYes
2025-12-03 00:31CVE-2025-13354
4.3
Medium
type5afeYes
2025-12-03 00:30CVE-2025-13359
6.5
Medium
type5afeYes
2025-11-07 00:00CVE-2025-11972
4.9
Medium
Naoya Takahashi (nakko)Yes
2025-08-14 00:00CVE-2025-55710
4.3
Medium
Que Thanh Tuan - Blue RockYes
2025-04-07 00:00CVE-2025-0627
4.4
Medium
Dmitrii IgnatyevYes
Showing 1–10 of 16 reports
PublishPress Taxonomies – Tag, Category, and Taxonomy Manager – Autotagger Automatically Add Terms banner
Latestv4.0.0

PublishPress Taxonomies – Tag, Category, and Taxonomy Manager – Autotagger Automatically Add Terms

PublishPress

Author

PublishPress

4.6(195)
92/100
Last Updated
2026-10-05 (23d ago)
Active Installs
40,000+
Downloads
6,192,940
Requires WP
6.7+
Requires PHP
7.4+
Tested up to
WP 7.1.3
Created
2007-10-10 (19y ago)

PublishPress Taxonomies allows you to create and manage Tags, Categories, and all your WordPress taxonomy terms. PublishPress Taxonomies can help with all your WordPress content, from adding Tags and Categories to Pages, to managing WooCommerce Product Categories and bbPress Topic Tags. PublishPress Taxonomies has integrations with AI tools including OpenAI. You can use these AI services to find the best taxonomy terms for your content. With PublishPress Taxonomies, you can organize, optimize, and showcase all your WordPress content: Organize: In PublishPress Taxonomies, you can manage taxonomies, and also terms. There are tools for you to add, rename, remove, delete and even merge terms. You can add any term or taxonomy to any post type. Optimize: PublishPress Taxonomies can improve your SEO with automatic term management. PublishPress Taxonomies can automatically suggest relevant terms for your content and link those terms to the correct archive pages. Showcase: PublishPress Taxonomies allows you to use your terms for advanced features such as Related Posts and Tag Clouds. PublishPress Taxonomies Pro Upgrade to PublishPress Taxonomies Pro This plugin is the free version of PublishPress Taxonomies. The Pro version of PublishPress Taxonomies has extra features and expert support. Get the PublishPress Taxonomies Pro plugin now! 10 Key Features in PublishPress Taxonomies Manage Terms and Taxonomies: You can create new taxonomies and edit all the settings for each taxonomy. Terms Display: This feature allows you to create a customizable display of all the terms in one taxonomy. Terms for Current Post: This enables you to create a customizable display of all the terms assigned to the current post. Related Posts: Shows lists of posts with similar tags and categories. Auto Links: If you have a term called “WordPress”, the Auto Links feature will find any instances of “WordPress” in your content and add links to the archive page for that tag. Auto Terms: If you have a term called “WordPress”, Auto Terms can analyze your posts, and when it finds the word “WordPress”, it can add that term to your post. Add Terms with AI: The Pro version of PublishPress Taxonomies has AI integrations with OpenAI, IBM Watson, and more. This makes it easier for you to find or create the best taxonomy terms for your content. Term Synonyms: This feature allows you to have multiple words associated with a single term. Linked Terms: You can connect terms. When the main term is added to a post, the linked terms will be added also. Manage Terms: Add, rename, merge, remove, delete and even delete unused terms. Feature 1. Create and Manage Taxonomies PublishPress Taxonomies can manage all the taxonomies created by WordPress and your plugins and themes. You can change the settings for each taxonomy. For example, you can change the visual labels, and control whether the taxonomy is organized in parent-child relationships. You can also assign your taxonomies to different post types. For example, you can use PublishPress Taxonomies to add Categories to Pages, or WooCommerce Tags to Posts. Click here to read about managing taxonomies. Feature 2. Terms Display The Terms Display feature in PublishPress Taxonomies allows you to show a cloud or list of the terms used on your site. For example, you can create a “Tag Cloud” showing all your WooCommerce product categories, or you can create a list of all the tags on bbPress topics. PublishPress Taxonomies makes it easy to customize the format of your terms, and add custom CSS styles. The terms can be shown in a shortcode, a widget, or PublishPress Taxonomies can try and automatically add the terms into your content. Click here to read about Terms Display. Feature 3. Terms for Current Post The Terms for Current Post feature in PublishPress Taxonomies allows you to customize the displays of terms for single posts. This display is separate from any default display of terms in your theme, so you can use this feature to easily show terms anywhere on your site. PublishPress Taxonomies makes it easy to customize the format of your terms, and add custom CSS styles. The terms can be shown in a shortcode, a widget, or PublishPress Taxonomies can try and automatically add the terms into your content. Click here to read about Terms for Current Post. Feature 4. Related Posts PublishPress Taxonomies can display posts that are related to the current post. This feature works by checking for shared taxonomy terms. If your post has the terms “Vegetables” and “Food”, then this feature will likely display other posts that also have the terms “Vegetables” and “Food”. The more terms that are shared, the more likely a post is to show. The Related Posts can be shown in a shortcode, a widget, or PublishPress Taxonomies can try and automatically add the related posts into your content. Click here to read about Related Posts. Feature 5. Auto Links The Auto Links feature in PublishPress Taxonomies will automatically add links to your content. If you have a term called “WordPress”, the Auto Links feature will find any instances of “WordPress” in your content and add a link to the archive page for that tag. So any instances of “WordPress” will link to /tag/wordpress. Click here to read about Auto Links. Feature 6. Auto Terms This feature allows WordPress to examine your post content and title for specified terms and automatically add those terms as Tags. Here’s an example of how it works: You add “WordPress” to the keywords list in PublishPress Taxonomies. If your post content or title contains the word “WordPress”, then PublishPress Taxonomies will automatically add “WordPress” as a term for this post. Click here to read about automatically adding terms. Feature 7. Add Terms with AI (Pro version) This feature makes it easier for you to find or create the best taxonomy terms for your content. PublishPress Taxonomies AI can show a metabox on your post editing screen with all these options:. Manage Post Terms: This feature allows you to manage all the terms that are currently attached to a post. Suggest Existing Terms: This feature uses a tool in the PublishPress Taxonomies plugin that can scan your posts and suggest relevant terms that already exist on your site. Show All Existing Terms: This feature allows you to browse all the terms in a taxonomy. OpenAI: These integrations allow you to connect to external service. These services will scan your content and suggest relevant terms. They can suggest existing terms and also new terms. Click here to read about PublishPress Taxonomies and AI. Feature 8. Term Synonyms Synonyms is a feature in PublishPress Taxonomies Pro that allows you to have multiple words associated with a single term. If PublishPress Taxonomies scans your content and finds a synonym, it will act as if it has found the main term. Synonyms will be available on each term screen. For example, if your term is “Apple”, you can create synonyms such as “Apples”, “Golden Delicious”, “Granny Smith”, “Pink Lady”, “Honeycrisp”, “Red Delicious”, “Braeburn” and “Gravenstein”. Click here to read about Term Synonyms. Feature 9. Linked Terms Linked Terms is a feature in PublishPress Taxonomies Pro that allows you to connect terms. When the main term is added to a post, the linked terms will be added also. For sites with a lot of terms, this feature makes it easier and quicker for your users to add the correct terms. For example, if you add the term “WordPress” to your posts, PublishPress Taxonomies can automatically add Linked Terms that include “CMS”, “website”, and “website design”. Click here to read about Linked Terms. Feature 10. Manage Terms The Manage Terms screen in PublishPress Taxonomies provides you with several useful tools to manage the terms on your site. These tools can be used with any taxonomy. Here are some of the tools on the Manage Terms screen: Add terms: Quickly add terms to your content. Rename terms: Change the name of your terms in bulk. Merge terms: Combine existing terms together. This is very useful for fixing typos in your terms. Delete unused terms: Delete any terms that are rarely used. Click here to read about managing terms. PublishPress Taxonomies Pro Upgrade to PublishPress Taxonomies Pro This plugin is the free version of PublishPress Taxonomies. The Pro version of PublishPress Taxonomies has extra features and expert support. Get the PublishPress Taxonomies Pro plugin now! The PublishPress Taxonomies and Tag Groups plugins PublishPress Taxonomies is developed by the same team that support the popular Tag Groups plugin. Together PublishPress Tag Groups and PublishPress Taxonomies are an excellent solution for organizing and displaying your site’s content. PublishPress Taxonomies Bug Reports Bug reports for PublishPress Taxonomies are welcomed in our repository on GitHub. Please note that GitHub is not a support forum, but a place to report bugs in the plugin that can be replicated outside of a single site. Follow the PublishPress Taxonomies team Follow the PublishPress team and find product news on the PublishPress website.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C