Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Taogogo

First CVE: Feb 11, 2019Active for: 7 yearsTotal CVEs: 25
49.0
VTI Score
High

Taogogo maintains a narrowly focused portfolio centered on TaoCMS, a content-management system whose vulnerability footprint, despite modest product scope, sits among the more prominent in the landscape. The vendor's disclosures skew strongly toward critical-severity outcomes, reflecting a recurrent pattern of structural weaknesses in input handling and access control across the application. The exposure concentrates in a consistent set of weakness classes including SQL injection, code injection, path traversal, cross-site scripting, and improper file/directory access controls—all characteristic of web-application architecture where user input interacts directly with backend execution and file-system boundaries. Defenders relying on TaoCMS should treat advisories as high-priority and apply patches promptly to mitigate the severity tendency of this vendor's disclosures. Current exploitation activity and exposure counts are shown alongside this summary.

FAUCET AI Generated
25
Total CVEs
More Total CVEs than 97% of tracked vendors
5.0
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 97% of tracked vendors
8.1
Avg CVSS Score
Higher Avg CVSS Score than 79% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Taogogo over time

Volume of CVEsAvg CVSS Base Score
First CVE
Feb 11, 2019
7 years ago
Most Recent CVE
Apr 29, 2024
817 days ago

Products(1 total)

Top CVEs

Signals from CVEs in this vendor scope (25 CVEs).

25 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2022-25578CRITICAL
taocms v3.0.2 allows attackers to execute code injection via arbitrarily editing the .htaccess file.
Mar 18, 20229.834NONO
CVE-2022-36262CRITICAL
An issue was discovered in taocms 3.0.2. in the website settings that allows arbitrary php code to be injected by modifying config.php.
Aug 15, 20229.832NONO
CVE-2023-1947CRITICAL
A vulnerability was found in taoCMS 3.0.2. It has been classified as critical. Affected is an unknown function of the file /admin/admin.php. The manipulation leads to code injectio
Apr 7, 20239.831NONO
CVE-2022-46998CRITICAL
An issue in the website background of taocms v3.0.2 allows attackers to execute a Server-Side Request Forgery (SSRF).
Jan 26, 20239.831NONO
CVE-2022-48006CRITICAL
An arbitrary file upload vulnerability in taocms v3.0.2 allows attackers to execute arbitrary code via a crafted PHP file. This vulnerability is exploited via manipulation of the u
Jan 30, 20239.830NONO
CVE-2022-23880CRITICAL
An arbitrary file upload vulnerability in the File Management function module of taoCMS v3.0.2 allows attackers to execute arbitrary code via a crafted PHP file.
Mar 23, 20229.830NONO
CVE-2022-25505CRITICAL
Taocms v3.0.2 was discovered to contain a SQL injection vulnerability via the id parameter in \include\Model\Category.php.
Mar 21, 20229.830NONO
CVE-2021-46204CRITICAL
Taocms v3.0.2 was discovered to contain an arbitrary file read vulnerability via the path parameter. SQL injection vulnerability via taocms\include\Model\Article.php.
Jan 19, 20229.830NONO
CVE-2021-45014CRITICAL
There is an upload sql injection vulnerability in the background of taocms 3.0.2 in parameter id:action=cms&ctrl=update&id=26
Dec 14, 20219.830NONO
CVE-2021-45015CRITICAL
taocms 3.0.2 is vulnerable to arbitrary file deletion via taocms\include\Model\file.php from line 60 to line 72.
Dec 14, 20219.128NONO
View all 25 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products25 CVEs
28%
20%
52%
Severity distribution among all CVEs352,708 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network25 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low25 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None20 (80.0%)
Unknown0 (0.0%)
Required5 (20.0%)
Privileges Required
Low2 (8.0%)
High7 (28.0%)
None16 (64.0%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (25 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Taogogo.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Taogogo — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Taogogo's Products

View all 2 CNAs →

Top CWEs