Known vulnerabilities in Terms descriptions

This plugin allows you to create list of terms and assign links to them. Plugin replaces terms occurrences in your posts with appropriate links.

6Reported vulnerabilities

7.5Highest CVSS score

3.4.10Latest version

1,000+Active installs

What to do now

Update Terms descriptions to 3.4.10 or later. 5 of these have a fixed version available. Updating resolves them.

Plugin last updated: January 25, 2026 / Tested up to WordPress: 6.9.7 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2025-62139	High 7.5	0.2%	3.4.9 and earlier	—	December 31, 2025
CVE-2024-9374	Medium 6.1	0.3%	0 to 3.4.6 (inclusive)	`3.4.7`	October 24, 2024
CVE-2023-28779	Medium 6.1	0.4%	3.4.4 and earlier	`3.4.5`	July 10, 2023
CVE-2024-47336	Medium 4.4	0.3%	3.4.7 and earlier	`3.4.8`	September 26, 2024
CVE-2026-24621	Medium 4.4	0.1%	3.4.9 and earlier	`3.4.10`	January 10, 2026
CVE-2025-6719	Medium 4.4	0.2%	0 to 3.4.8 (inclusive)	`3.4.9`	July 18, 2025

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.