What is CVE-2026-15231?
This CVE identifies a vulnerability in the WordPress plugin 'Tag, Category, and Taxonomy Manager' before version 3.51.0. The plugin fails to verify authorization to access referenced posts, allowing users with contributor privileges to disclose data from private or draft posts they do not own. Updating the plugin to the latest version is recommended.
Azərbaycanca: Bu CVE, WordPress-in "Tag, Category, and Taxonomy Manager" plaginin 3.51.0-dan əvvəlki versiyalarında aşkar edilmiş zəiflikdir. Plagin istifadəçinin şəxsi və ya qaralama yazılara giriş icazəsini yoxlamadığı üçün, contributor səviyyəli istifadəçilər bu yazılardan məlumat sızdıra bilər. Plaginin ən son versiyasına yeniləmək tövsiyə olunur.
Related CVEs
link basis: same weakness class CWE-862
FAQ2
Which WordPress plugin is affected by CVE-2026-15231 and what is the cause?
The vulnerability affects the 'Tag, Category, and Taxonomy Manager' plugin before version 3.51.0. The cause is that the plugin fails to properly check user authorization to access private or draft posts.
What level of user can exploit CVE-2026-15231 to disclose data?
Users with contributor privileges can exploit this vulnerability to disclose data from private or draft posts they do not own.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.