GCVE - cpe:2.3:a:steve_burge:taxopress:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:steve_burge:taxopress:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Steve Burge (`67bf6153-7a0b-5b3a-9472-e26269ab97c6`)
Product	Taxopress (`fac92f1d-edad-5826-9bbd-1083cf10b72c`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-42646`	vulnerable	2026-06-08 08:03:16.582039	WordPress TaxoPress plugin <= 3.44.0 - SQL Injection vulnerability HIGH (7.6) Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Steve Burge TaxoPress simple-tags allows Blind SQL Injection.This issue affects TaxoPress: from n/a through <= 3.44.0. Published: 2026-04-29T10:40:45.888Z Updated: 2026-05-12T11:03:22.048Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Plugin/simple-tags/vulnerability/wordpress-taxopress-plugin-3-44-0-sql-injection-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-55710`	vulnerable	2026-06-08 07:33:15.277795	WordPress TaxoPress Plugin <= 3.37.2 - Sensitive Data Exposure Vulnerability MEDIUM (4.3) Insertion of Sensitive Information Into Sent Data vulnerability in Steve Burge TaxoPress simple-tags allows Retrieve Embedded Sensitive Data.This issue affects TaxoPress: from n/a through <= 3.37.2. Published: 2025-08-14T18:21:29.824Z Updated: 2026-04-28T16:13:37.201Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Plugin/simple-tags/vulnerability/wordpress-taxopress-plugin-plugin-3-37-2-sensitive-data-exposure-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.