CVE-2026-74012

Deserialization of Untrusted Data vulnerability in TaxoPress allows Object Injection. This issue affects TaxoPress: from n/a through 3.51.0...

CVE-2026-74012

The WordPress TaxoPress plugin (versions ≤ 3.51.0) is vulnerable to PHP Object Injection via its Editor component, exploitable over the network with low privileges, potentially leading to full confidentiality, integrity, and availability impact (CVSS 8.8). PatchStack is the CNA. No exploitation e...