Terms descriptions
Terms descriptions has 6 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; 5 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 5.5, and the most serious one scores 7.5 out of 10. Severity breakdown: 0 critical and 1 high. 2025 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Scripting, behind 5 of the records (83%). Other recurring categories include Exposure Of Sensitive Information To An Unauthorized Actor.
5 of the records (83%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2025.
6 independent researchers contributed these findings, one record each. Terms descriptions is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.
CVE-2025-62139Terms descriptions <= 3.4.9 - Unauthenticated Information Exposure
Read the full analysisVulnerability Records

Terms descriptions
Author
Vladimir Statsenko
The main purpose of this plugin is easy link building. For example, you can create a page or post with detail description of some term. Most likely, this term is used in other posts and it would be appropriate to put a links from that posts to you page. But doing this operation manually is very time consuming task. This WordPress plugin allow you to maintain a list of terms and assign links to them. Plugin automatically replaces terms occurrences in posts with appropriate links. You can control the number of terms replacements. This plugin allows. Create, update and delete terms through admin interface (Terms menu). Each term can contain one or several word forms (e.g. pear, pears). Assign a link to a term. This link can point to your blog post, page, custom post type or to a page on another site. Control how many terms will be converted to links in each post. Select where you want to replace terms, in posts content, in posts comments or both. Set several word forms for each term. For example, “apple|apples”. Word forms should be separated with a “|” symbol. Search for terms in posts content and convert them to appropriate links. This task is performed automatically when plugin is activated. Disable terms to links conversion for individual posts. Wrap links with arbitrary text (for example, you can wrap link with strong tag) Export and import terms and plugin options. Export terms in CSV format. Packet terms creation. Permalinks update function (use it after permalinks structure updates). Please, note that terms will not be replaced with links in following cases. If the term is already inside the link. E.g. if the link was created manually. So the plugin will not change any links that already exists in the post. If the term is located inside html tag. For example, inside alt attribute of img tag. If the term is located in h1–h6 tags. If the term is part of another word. E.g. term = car and the word is carrot. If you checked “Disable Terms Descriptions plugin for this post” checkbox (at the bottom of post edit screen). Important! Huge terms lists with hundreds of terms can increase page creation time. In such cases, consider to use caching plugin. Detail description of this plugin is available in English. Detail description of this plugin is available in Russian. Serbo-Croatian translations were created by Borisa Djuraskovic. Spanish translations were created by Juan. Development If you want to participate in the plugin development, create a pull request to the official GutHub repository. The plugin built with PhpStorm
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C