CVE-2025-13359

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-13359", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2025-11-18T15:56:36.915Z", "datePublished": "2025-12-03T13:52:45.829Z", "dateUpdated": "2026-04-08T17:27:12.752Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T17:27:12.752Z"}, "affected": [{"vendor": "stevejburge", "product": "Tag, Category, and Taxonomy Manager \u2013 AI Autotagger with OpenAI", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "3.40.1", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The Tag, Category, and Taxonomy Manager \u2013 AI Autotagger with OpenAI plugin for WordPress is vulnerable to time-based SQL Injection via the \"getTermsForAjax\" function in all versions up to, and including, 3.40.1. This is due to insufficient escaping on the user supplied parameters and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with contributor level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database granted they have metabox access for the taxonomy (enabled by default for contributors)."}], "title": "Tag, Category, and Taxonomy Manager \u2013 AI Autotagger with OpenAI <= 3.40.1 - Authenticated (Contributor+) SQL Injection", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/d9bebdc0-1625-4dc4-8c92-37f379868cd5?source=cve"}, {"url": "https://github.com/TaxoPress/TaxoPress/commit/1097a22181aa10ce55cc9cd5fa8495f7494e18ea"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')", "cweId": "CWE-89", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "baseScore": 6.5, "baseSeverity": "MEDIUM"}}], "credits": [{"lang": "en", "type": "finder", "value": "M Indra Purnama"}], "timeline": [{"time": "2025-11-08T00:00:00.000Z", "lang": "en", "value": "Discovered"}, {"time": "2025-11-18T16:12:12.000Z", "lang": "en", "value": "Vendor Notified"}, {"time": "2025-12-03T00:30:02.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-12-03T14:13:44.239329Z", "id": "CVE-2025-13359", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-12-03T14:13:50.283Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-13359", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-12-03T14:13:44.239329Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-12-03T14:13:47.963Z"}}], "cna": {"title": "Tag, Category, and Taxonomy Manager \u2013 AI Autotagger with OpenAI <= 3.40.1 - Authenticated (Contributor+) SQL Injection", "credits": [{"lang": "en", "type": "finder", "value": "M Indra Purnama"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"}}], "affected": [{"vendor": "stevejburge", "product": "Tag, Category, and Taxonomy Manager \u2013 AI Autotagger with OpenAI", "versions": [{"status": "affected", "version": "*", "versionType": "semver", "lessThanOrEqual": "3.40.1"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2025-11-08T00:00:00.000+00:00", "value": "Discovered"}, {"lang": "en", "time": "2025-11-18T16:12:12.000+00:00", "value": "Vendor Notified"}, {"lang": "en", "time": "2025-12-03T00:30:02.000+00:00", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/d9bebdc0-1625-4dc4-8c92-37f379868cd5?source=cve"}, {"url": "https://github.com/TaxoPress/TaxoPress/commit/1097a22181aa10ce55cc9cd5fa8495f7494e18ea"}], "descriptions": [{"lang": "en", "value": "The Tag, Category, and Taxonomy Manager \u2013 AI Autotagger with OpenAI plugin for WordPress is vulnerable to time-based SQL Injection via the \"getTermsForAjax\" function in all versions up to, and including, 3.40.1. This is due to insufficient escaping on the user supplied parameters and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with contributor level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database granted they have metabox access for the taxonomy (enabled by default for contributors)."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-89", "description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2025-12-03T13:52:45.829Z"}}}, "cveMetadata": {"cveId": "CVE-2025-13359", "state": "PUBLISHED", "dateUpdated": "2025-12-03T14:13:50.283Z", "dateReserved": "2025-11-18T15:56:36.915Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2025-12-03T13:52:45.829Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Tag, Category, and Taxonomy Manager \u2013 AI Autotagger with OpenAI", "vendor": "stevejburge", "versions": [{"lessThanOrEqual": "3.40.1", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:taxopress:taxopress:*:*:*:*:*:wordpress:*:*", "matchCriteriaId": "CE8412F8-3636-4267-8AF5-D87CF86ADEC2", "versionEndExcluding": "3.41.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The Tag, Category, and Taxonomy Manager \u2013 AI Autotagger with OpenAI plugin for WordPress is vulnerable to time-based SQL Injection via the \"getTermsForAjax\" function in all versions up to, and including, 3.40.1. This is due to insufficient escaping on the user supplied parameters and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with contributor level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database granted they have metabox access for the taxonomy (enabled by default for contributors)."}, {"lang": "es", "value": "El plugin \u201cTag, Category, and Taxonomy Manager - AI Autotagger with OpenAI\u201d para WordPress es vulnerable a inyecci\u00f3n SQL basada en tiempo a trav\u00e9s de la funci\u00f3n \u201cgetTermsForAjax\u201d en todas las versiones hasta la 3.40.1, inclusive. Esto se debe a un escape insuficiente en los par\u00e1metros proporcionados por el usuario y a la falta de preparaci\u00f3n suficiente en la consulta SQL existente. Esto hace posible que atacantes autenticados, con acceso de nivel de colaborador o superior, puedan a\u00f1adir consultas SQL adicionales a consultas ya existentes que pueden ser utilizadas para extraer informaci\u00f3n sensible de la base de datos, siempre que tengan acceso a la metabox para la taxonom\u00eda (habilitado por defecto para los colaboradores)."}], "id": "CVE-2025-13359", "lastModified": "2026-10-18T17:10:00.110", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "security@wordfence.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-13359", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2025-12-03T14:13:44.239329Z", "version": "2.0.3"}}]}, "published": "2025-12-03T14:15:47.890", "references": [{"source": "security@wordfence.com", "tags": ["Patch"], "url": "https://github.com/TaxoPress/TaxoPress/commit/1097a22181aa10ce55cc9cd5fa8495f7494e18ea"}, {"source": "security@wordfence.com", "tags": ["Third Party Advisory"], "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/d9bebdc0-1625-4dc4-8c92-37f379868cd5?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-89"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-21T01:10:56.108033+00:00", "value": {"mitigation_remediation": ["Update the TaxoPress plugin to a version newer than 3.40.1, which contains the proper escaping and query preparation for the getTermsForAjax call.", "If an update is not yet available, restrict AJAX access to administrators only or temporarily disable the getTermsForAjax endpoint for contributors by adjusting the plugin\u2019s settings or adding custom code to block the route.", "As a temporary workaround, remove or revoke the contributor metabox access to taxonomy terms so that the insecure AJAX request cannot be made."], "summary": {"action": "Patch immediately", "impact": "Authenticated SQL injection enabling database data extraction"}, "threat_synthesis": {"affected_systems": "All releases of the TaxoPress Tag, Category, and Taxonomy Manager \u2013 AI Autotagger with OpenAI plugin up to and including version 3.40.1 are affected. The plugin is maintained by stevejburge and runs on WordPress; contributors or higher roles who have the default metabox access for taxonomies can trigger the flaw.\n\n", "description_and_impact": "The vulnerability lies in the getTermsForAjax function of the Tag, Category, and Taxonomy Manager \u2013 AI Autotagger with OpenAI plugin. Insufficient escaping of user-supplied parameters and the lack of prepared statements allow attackers to inject additional SQL clauses into existing queries via a time-based technique. This can be used to pull sensitive information from the WordPress database. The weakness corresponds to CWE-89.\n\n", "risk_and_exploitability": "The CVSS score of 6.5 indicates a medium-severity flaw, and the EPSS score of < 1% suggests a low probability of exploitation at this time. The attack requires authenticated access at contributor level or higher and utilizes the AJAX endpoint, making it a low-latency, time-based injection. Although the vulnerability is not listed in the CISA KEV catalog, the potential for database compromise warrants immediate attention."}}}}, "created": "2025-12-04T16:44:30.507075+00:00", "updated": "2026-04-21T01:15:20.133870+00:00", "vendors": ["wordpress", "wordpress$PRODUCT$wordpress"]}