CVE-2026-74012

HighCVSS 8.8

Published: 18/08/2026(UTC)Translated: 18/08/2026(UTC)NVD NIST

Summary

TaxoPress versions up to 3.51.0 contain a PHP Object Injection vulnerability in the editor. This vulnerability may allow an attacker to perform unauthorized operations within the application context.

Risk Assessment

PHP object injection can lead to remote code execution, application takeover, or other severe security consequences.

Recommendation

Upgrade TaxoPress to a version newer than 3.51.0, which includes the fix.

Original NVD description (English source)

Editor PHP Object Injection in TaxoPress <= 3.51.0 versions.