Taxonomy Filter
Taxonomy Filter has one disclosed vulnerability in the WordSec catalog, all reported in 2023; it is fixed as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).
The one issue recorded for Taxonomy Filter has a vendor fix available, so running the current release closes it.
All of these findings were reported by Nguyen Xuan Chien. Taxonomy Filter is installed on roughly 800 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.5.10.
CVE-2023-48282Taxonomy filter <= 2.2.9 - Cross-Site Request Forgery via taxonomy_filter_save_main_settings()
Read the full analysisVulnerability Records

Taxonomy Filter
Author
Andrea Landonio
Taxonomy Filter is a simple and flexible plugin which allow users to filter hierarchical term taxonomies inside admin pages. If you need to simplify your tags and categories research on admin pages, this plugin will make it easier for you. It adds a custom input field (only for configured taxonomies) that you can use to filter a every taxonomy list. Imagine having too many tags on your post admin page and having to lose so much time scrolling a long list of items or having to search for a tag with the classic browser search box. With “Taxonomy Filter” plugin you can search, choice and select tags in a very short time, a great gain! In addition, you have to setup which taxonomies should have “Taxonomy Filter” activated. When you install and activate the plugin, an admin page is added on settings section. In this page are automatically listed all valid taxonomies, you have two options: enable on post management pages (allow you to turn on/off filter field) hide filter field if taxonomy is empty You can also manage taxonomy filters into bulk edit section if you want to perform a quick edit. If in your theme you have changed post columns using the ‘manage_edit-post_columns’ filter, you need to add another filter to apply the taxonomy filter bulk section. For example: add_filter('manage_edit-post_columns', 'taxonomy_filter_manage_bulk_columns', 99, 1); add_filter('manage_edit-<CUSTOM-TYPES>_columns', 'taxonomy_filter_manage_bulk_columns', 99, 1); It works only with hierarchical taxonomies (both default categories and custom taxonomies). When you enable a taxonomy filter, a section for choosing hidden taxonomy terms is displayed in user profile page and in term edit pages. In user profile page you can select (for each user) a list of taxonomy terms that are removed from hierarchical term taxonomies inside admin pages. By default, all taxonomy terms are visible in the hierarchical term taxonomies sections inside admin pages. You can choose only from max 2 nested levels but all the children of a hidden term are automatically removed from admin pages. Keep in mind that the hidden terms are not searchable and filterable. In edit term page you can select (for all users) if term should be removed (make hidden) from hierarchical term taxonomies inside admin pages. Usage Go to WP-Admin -> Posts -> Add New. Find the input filter field on page sidebar. Select tags filtering list. Links: Author’s Site
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C