Browse all 3 CVE security advisories affecting Tagbox. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Tagbox is a digital asset management platform primarily used for organizing and distributing visual content. Historically, it has been susceptible to multiple remote code execution vulnerabilities, cross-site scripting flaws, and privilege escalation issues. The platform's three recorded CVEs highlight consistent weaknesses in input validation and access control mechanisms. While no major public security incidents have been documented, the recurring nature of these vulnerabilities suggests potential risks for organizations relying on Tagbox for content management. Users should implement strict input sanitization and maintain current patch levels to mitigate exposure to known exploitation vectors.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2024-32552 | WordPress Tagbox – UGC Galleries, Social Media Widgets, User Reviews & Analytics plugin <= 3.2 - Cross Site Scripting (XSS) vulnerability — TaggboxCWE-79 | 6.5 | Medium | 2024-04-18 |
| CVE-2023-52225 | WordPress Taggbox Plugin <= 3.1 is vulnerable to PHP Object Injection — Tagbox – UGC Galleries, Social Media Widgets, User Reviews & AnalyticsCWE-502 | 10.0 | Critical | 2024-01-08 |
| CVE-2023-33214 | WordPress Taggbox Plugin <= 3.1 is vulnerable to Cross Site Request Forgery (CSRF) — Tagbox – UGC Galleries, Social Media Widgets, User Reviews & AnalyticsCWE-352 | 5.4 | Medium | 2023-12-18 |
This page lists every published CVE security advisory associated with Tagbox. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.