low2.7
CVE-2026-15231
The Tag, Category, and Taxonomy Manager WordPress plugin before 3.51.0 does not verify that a user is authorized to access a referenced post before processing …
Impact
The Tag, Category, and Taxonomy Manager WordPress plugin before 3.51.0 does not verify that a user is authorized to access a referenced post before processing it and returning derived data, allowing users with contributor privileges to disclose data from private or draft posts they do not own.
Affected products
| Product | Affected versions |
|---|---|
| Tag, Category, And Taxonomy Manager WordPress Plugin | before 3.51.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.