EUVD-2026-66944
GHSA-m25w-8273-84q7
Severity by source
AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L
Unauthenticated network SQLi with no interaction gives AV:N/AC:L/PR:N/UI:N and C:H for full DB read; I:N and only A:L as it reads rather than writes, and S:U since impact stays within the site database.
Primary rating from Vendor (Patchstack).
CVSS VectorVendor: Patchstack
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L
Lifecycle Timeline
2DescriptionCVE.org
Unauthenticated SQL Injection in Beautiful Taxonomy Filters <= 2.4.6 versions.
AnalysisAI
SQL injection in the Beautiful Taxonomy Filters WordPress plugin (versions 2.4.6 and earlier) lets remote, unauthenticated attackers inject arbitrary SQL through the plugin's taxonomy filtering logic, exposing the entire WordPress database including credentials and secrets. Rated CVSS 9.3 with a network attack vector and no privileges required, though no public exploit code has been identified at time of analysis and it is not listed in CISA KEV. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The only prerequisite is that a target WordPress site has the Beautiful Taxonomy Filters plugin (version <= 2.4.6) installed and active, with its filter endpoint reachable over the network; per the CVSS vector (AV:N/AC:L/PR:N/UI:N) there is no authentication, no user interaction, and no special non-default configuration required - this is unauthenticated, remote, low-complexity exploitation against a default install of the plugin. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The signals point to a genuinely high-priority, easy-to-exploit flaw rather than an inflated CVSS: the vector is AV:N/AC:L/PR:N/UI:N - network-reachable, low complexity, unauthenticated, and no user interaction - which is the classic profile of a mass-scannable WordPress plugin bug, and any mid-sized operator running this plugin should treat it as urgent. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker crawls the internet for WordPress sites exposing Beautiful Taxonomy Filters, then sends a single crafted HTTP request with a malicious taxonomy/term filter parameter carrying an SQL payload. Because no authentication or user interaction is required (PR:N/UI:N), the injected query executes against the site database, letting the attacker dump wp_users password hashes and secret keys. … |
| Remediation | No vendor-released patch version is identified in the available data - the input specifies only that versions up to and including 2.4.6 are affected, so administrators should consult the Patchstack advisory (https://patchstack.com/database/wordpress/plugin/beautiful-taxonomy-filters/vulnerability/wordpress-beautiful-taxonomy-filters-plugin-2-4-6-sql-injection-vulnerability?_s_id=cve) and the plugin's WordPress.org page for a release newer than 2.4.6 and upgrade to it once confirmed. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: immediately disable and remove the Beautiful Taxonomy Filters plugin (all versions 2.4.6 and earlier) from all WordPress installations, verify removal via WordPress admin dashboard, and test critical site functionality to ensure no dependencies on the plugin. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-89 – SQL Injection
View allShare
External POC / Exploit Code
Leaving vuln.today