CVE-2026-78288: WordPress Beautiful Taxonomy Filters plugin <= 2.4.6 - SQL Injection vulnerability
Published Aug 27, 2026
·Updated
Unauthenticated SQL Injection in Beautiful Taxonomy Filters <= 2.4.6 versions.
Affected Software
1 affected component
WordPress Beautiful Taxonomy Filters plugin<=2.4.6
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Beautiful Taxonomy Filters Pluginto a version that resolves this vulnerability.Fixed in 2.4.7
Event History
Aug 27, 2026
CVE Published
via MITRE·09:00 AM
Data Sourced
via MITRE·09:00 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·10:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
The vulnerability is unauthenticated and remotely reachable, so an attacker does not need a WordPress account or user interaction to attempt exploitation.
2
What versions are affected?
Beautiful Taxonomy Filters versions 2.4.6 and earlier are identified as affected.
3
What is the likely impact if exploitation succeeds?
The supplied severity vector indicates high confidentiality impact and low availability impact. Integrity impact is listed as none.