I discovered this while posting on a different blog. I won’t post details until after figure out where to report it to the wordpress developers.
Update: I just tested it with this site and was able to recreate it.
Update 2: It’s either a bug with wordpress or Ultimate Tag Warrior. After further testing, the bug only shows up if I enter tags.
Update 3: Submitting bug reports on plugins is overly complicated, so I emailed the author directly. I wouldn’t call this a security issue, but could expose entries you have not published.