Taxonomy Switcher
Taxonomy Switcher has one disclosed vulnerability in the WordSec catalog, all reported in 2015; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Taxonomy Switcher has a vendor fix available, so running the current release closes it.
Taxonomy Switcher is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2015-10013Taxonomy Switcher <= 1.0.3 - Reflected Cross-Site Scripting
Read the full analysisVulnerability Records
Taxonomy Switcher
Author
webdevstudios
This plugin allows you to select your “From”, and “To” Taxonomies, to convert all terms. Optionally select a parent term to limit terms to switch. Typing term names will do a live search of terms with the name you are typing AND possess child terms. Plugin also has built-in support for WP-CLI. In the command line, type in wp taxonomy-switcher for instructions. Plugin is on GitHub. Pull Requests and Forks welcome. Notes Please keep in mind, if parent isn’t set, or you don’t specify a comma-separated list of term ids to migrate, it will migrate all terms for that taxonomy to the new taxonomy. Pluginize was launched in 2016 by WebDevStudios to promote, support, and house all of their WordPress products. Pluginize is not only creating new products for WordPress all the time, but also provides ongoing support and development for WordPress community favorites like CPTUI, CMB2, and more.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C