What is GHSA-2fw4-4h2j-gcmv?

GHSA-2fw4-4h2j-gcmv is a security advisory published by GitHub Security Advisories with Low severity. The Tag, Category, and Taxonomy Manager WordPress plugin before 3.51.0 does not verify that a...

Which CVE IDs does GHSA-2fw4-4h2j-gcmv cover?

GHSA-2fw4-4h2j-gcmv covers the following CVE IDs: CVE-2026-15231. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-2fw4-4h2j-gcmv?

GHSA-2fw4-4h2j-gcmv has a CVSS v3 base score of 2.7, published by GitHub Security Advisories.

GHSA-2fw4-4h2j-gcmvLowCVSS 2.7

The Tag, Category, and Taxonomy Manager WordPress plugin before 3.51.0 does not verify that a...

Vendor

GitHub Security Advisories

Published

August 3, 2026

Last Modified

August 4, 2026

🔗 CVE IDs covered (1)

CVE-2026-15231 →

📋 Description

The Tag, Category, and Taxonomy Manager WordPress plugin before 3.51.0 does not verify that a user is authorized to access a referenced post before processing it and returning derived data, allowing users with contributor privileges to disclose data from private or draft posts they do not own.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-15231
https://wpscan.com/vulnerability/5980ab15-bc6e-4298-9d0c-92c17217ec2c
https://github.com/advisories/GHSA-2fw4-4h2j-gcmv