CVE-2024-43237: Steve Burge WordPress Tag Cloud Plugin – Tag Groups

Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Steve Burge WordPress Tag Cloud Plugin – Tag Groups tag-groups.This issue affects WordPress Tag Cloud Plugin – Tag Groups: from n/a through <= 2.0.3.

Affected products

• Steve Burge WordPress Tag Cloud Plugin – Tag Groups: up to and including 2.0.3
• Taxopress Taxopress: before 2.0.4 (fixed in 2.0.4)

Published 2024-09-25. Last modified 2026-06-17.