Collapsing Categories vulnerabilities

2 known vulnerabilities in Collapsing Categories from Robfelty. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.5 High severity

  Collapsing Categories: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-32366Mar 13, 2026Robfelty

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in robfelty Collapsing Categories collapsing-categories allows Blind SQL Injection.This issue affects Collapsing Categories: from n/a through <= 3.0.9.

• 7.5 High severity

  Collapsing Categories: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-12025Dec 18, 2024RobfeltyEPSS 2.69%

  The Collapsing Categories plugin for WordPress is vulnerable to SQL Injection via the 'taxonomy' parameter of the /wp-json/collapsing-categories/v1/get REST API in all versions up to, and including, 3.0.8 due to insufficient escaping on the user supplied param