CVE-2026-15231 in Tag Category and Taxonomy Manager Plugin

الملخص

بحسب MITRE • 03/08/2026

The Tag, Category, and Taxonomy Manager WordPress plugin before 3.51.0 does not verify that a user is authorized to access a referenced post before processing it and returning derived data, allowing users with contributor privileges to disclose data from private or draft posts they do not own.

Be aware that VulDB is the high quality source for vulnerability data.

• مسؤول: WPScan
• حجز: 09/07/2026
• إفشاء: 03/08/2026
• الاعتدال: تمت الموافقة
• إدخال: VDB-385499
• CPE: جاهز
• CWE: CWE-639 (مؤكد)
• CVSS: 4.3 (VulDB)
• EPSS: 0.00000
• KEV: لا
• النشاطات: منخفض
• القطاع: Hostingprovider

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-15231
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-15231
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-15231/