Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The Tag Groups is the Advanced Way to Display Your Taxonomy Terms WordPress plugin before 2.2.0 does not properly escape one of its AJAX parameters before reflecting it in the response body served with an HTML content type, allowing unauthenticated attackers to execute arbitrary JavaScript in the browser of a logged-in user with `edit_pages` capability (Editor or higher) who is tricked into following a crafted link.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
🚨 CVE-2026-9833 - high 🚨 WordPress Tag Groups < 2.2.0 - Reflected Cross-Site Scripting > The Tag Groups WordPress plugin < 2.2.0 contains a stored XSS caused by improper esca... 👾 https://cloud.projectdiscovery.io/library/CVE-2026-9833 @pdnuclei #NucleiTemplates #cve
CVE-2026-9833 Stored Cross-Site Scripting in Tag Groups Advanced Taxonomy Plugin Before 2.2.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-9833
Post summary
The notice announces CVE‑2026‑9833 as a stored XSS affecting Tag Groups Advanced Taxonomy Plugin versions earlier than 2.2.0, directing readers to a vulnerability details page for more information.