Unauthorized Access Vulnerability in Tag, Category, and Taxonomy Manager Plugin for WordPress
CVE-2026-15231
Currently unrated
What is CVE-2026-15231?
The Tag, Category, and Taxonomy Manager plugin for WordPress versions before 3.51.0 contains a flaw that allows users with contributor privileges to bypass authorization checks. This vulnerability enables them to access and disclose data from private or draft posts that they do not own, posing a significant risk to data privacy and integrity within the Wordpress environment.
Affected Version(s)
Tag, Category, and Taxonomy Manager 0 < 3.51.0
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.