High 7.1
2025-01-21< 2.0.5
CVE-2025-22735
Minimum safe version
2.0.5
Update to 2.0.5 or later to address 7 fixable vulnerabilities
CVE-2025-22735
Freemius SDK <= 2.4.2 - Missing Authorization Checks
CVE-2024-43237
WordPress WordPress Tag Cloud Plugin – Tag Groups Plugin <= 1.44.3.1 is vulnerable to Cross Site Scripting (XSS)
Freemius SDK <= 2.4.2 - Missing Authorization Checks
WordPress WordPress Tag Cloud Plugin – Tag Groups plugin < 1.43.10.1 - Sensitive Information Disclosure vulnerability
WordPress WordPress Tag Cloud Plugin – Tag Groups plugin < 1.43.10.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability