Tagdiv vulnerabilities

Products

• Composer 23
• Composer 8
• Newspaper 7
• Opt-in Builder 7
• Composer 4
• Cloud Library 3
• Newsmag 2
• Opt In Builder 2

Newest

• tagdiv opt-in builder WordPress tagDiv Opt-In Builder plugin <= 1.7.6 - SQL Injection vulnerability CVE-2026-96330 9.3 CriticalOctober 9, 2026
• tagdiv opt-in builder WordPress tagDiv Opt-In Builder plugin <= 1.7.6 - SQL Injection vulnerability CVE-2026-96329 8.5 HighOctober 9, 2026
• tagdiv composer tagDiv Composer <= 5.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2026-12561 6.4 MediumAugust 25, 2026
• tagdiv composer WordPress tagDiv Composer plugin <= 5.4.3 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2026-57734 7.1 HighJuly 13, 2026
• tagdiv cloud library WordPress tagDiv Cloud Library plugin <= 3.9.4 - Cross Site Scripting (XSS) vulnerability CVE-2026-57733 7.1 HighJuly 13, 2026
• tagdiv opt-in builder WordPress tagDiv Opt-In Builder plugin <= 1.7.4 - Cross Site Scripting (XSS) vulnerability CVE-2026-57732 7.1 HighJuly 13, 2026
• tagdiv composer WordPress tagDiv Composer plugin <= 5.4.3 - Arbitrary Shortcode Execution vulnerability CVE-2026-39712 5.3 MediumApril 8, 2026
• tagdiv composer WordPress tagDiv Composer plugin <= 5.4.3 - Cross Site Scripting (XSS) vulnerability CVE-2026-39692 6.5 MediumApril 8, 2026
• tagdiv opt-in builder WordPress tagDiv Opt-In Builder plugin <= 1.7.3 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-53222 7.1 HighMarch 19, 2026
• tagdiv composer WordPress tagDiv Composer plugin <= 5.4.2 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-50001 7.1 HighMarch 19, 2026
• tagdiv composer WordPress tagDiv Composer plugin <= 5.4.2 - Cross Site Scripting (XSS) vulnerability CVE-2025-50005 6.5 MediumJanuary 22, 2026
• tagdiv cloud library WordPress tagDiv Cloud Library plugin < 3.9.2 - Cross Site Scripting (XSS) vulnerability CVE-2025-62032 6.5 MediumNovember 6, 2025
• tagdiv composer WordPress tagDiv Composer plugin <= 5.4.1 - Cross Site Scripting (XSS) vulnerability CVE-2025-62031 7.1 HighNovember 6, 2025
• tagdiv composer WordPress tagDiv Composer plugin <= 5.4.1 - Cross Site Scripting (XSS) vulnerability CVE-2025-62030 6.5 MediumNovember 6, 2025
• tagdiv composer tagDiv Composer <= 5.3 - Reflected Cross-Site Scripting via 'data' CVE-2025-2806 6.1 MediumMay 8, 2025
• tagdiv composer tagDiv Composer <= 5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes CVE-2025-3510 6.4 MediumMay 2, 2025
• tagdiv opt-in builder tagDiv Opt-In Builder <= 1.7 - Authenticated (Subscriber+) SQL Injection via subscriptionCouponId Parameter CVE-2025-2890 6.5 MediumApril 30, 2025
• tagdiv composer TagDiv Composer <= 5.3 - Unauthenticated Arbitrary PHP Object Instantiation CVE-2024-13645 9.8 CriticalApril 4, 2025
• tagdiv composer tagDiv Composer <= 5.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting CVE-2025-1705 6.1 MediumMarch 28, 2025
• tagdiv composer tagDiv Composer <= 5.3 - Reflected Cross-Site Scripting via 'account_id' and 'account_username' CVE-2025-2804 6.1 MediumMarch 28, 2025
• tagdiv composer tagDiv Composer <= 5.0 - Reflected Cross-Site Scripting via envato_code[] CVE-2024-5212 6.1 MediumAugust 31, 2024
• tagdiv composer tagDiv Composer <= 5.0 - Reflected Cross-Site Scripting via envato_code[] CVE-2024-3886 6.1 MediumAugust 31, 2024
• tagdiv opt-in builder, opt in builder +1 more tagDiv Opt-In Builder <= 1.4.4 - Authenticated (Admin+) SQL Injection CVE-2023-3416 7.2 HighAugust 17, 2024
• tagdiv opt-in builder, opt in builder +1 more tagDiv Opt-In Builder <= 1.4.4 - Authenticated (Admin+) SQL Injection CVE-2023-3419 7.2 HighAugust 17, 2024
• tagdiv newspaper Newspaper <= 12.6.5 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment Meta CVE-2024-3815 5.5 MediumJune 15, 2024
• tagdiv composer tagDiv Composer <= 4.8 - Authenticated (Contributor+) Local File Inclusion via Shortcode CVE-2024-3813 8.8 HighJune 15, 2024
• tagdiv composer tagDiv Composer <= 4.8 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment Meta CVE-2024-3814 5.5 MediumJune 15, 2024
• tagdiv composer tagDiv Composer <= 4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via button Shortcode CVE-2024-3888 6.4 MediumJune 4, 2024
• tagdiv composer WordPress tagDiv Composer Plugin < 4.4 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-39166 7.1 HighNovember 13, 2023
• tagdiv composer, unknown tagdiv composer +1 more tagDiv Composer < 4.2 - Admin+ Stored XSS CVE-2023-3170 4.8 MediumSeptember 11, 2023
• tagdiv composer, unknown tagdiv composer +1 more tagDiv Composer < 4.2 - Unauthenticated Stored XSS CVE-2023-3169 6.1 MediumSeptember 11, 2023
• tagdiv cloud library, unknown tagdiv cloud library +1 more tagDiv Cloud Library < 2.7 - Unauthenticated Arbitrary User Metadata Update to Privilege Escalation CVE-2023-1597 8.8 HighJuly 10, 2023
• tagdiv composer, unknown tagdiv composer +1 more tagDiv Composer < 4.0 - Reflected Cross-site Scripting CVE-2023-1596 6.1 MediumMay 15, 2023
• macho themes newsmag, newspaper project newspaper, tagdiv composer +2 more tagDiv Composer < 3.5 - Unauthenticated Account Takeover CVE-2022-3477 9.8 CriticalNovember 14, 2022
• tagdiv newspaper Newspaper < 12 - Reflected Cross-Site Scripting CVE-2022-2627 6.1 MediumOctober 31, 2022
• tagdiv newspaper Newspaper < 12 - Reflected Cross-Site Scripting CVE-2022-2167 6.1 MediumOctober 31, 2022
• macho themes newsmag Newsmag < 5.0 - Unauthenticated Reflected Cross-site Scripting (XSS) CVE-2021-24304 6.1 MediumAugust 9, 2021
• tagdiv newspaper An issue was discovered in the tagDiv Newspaper theme 10.3.9.1 for WordPress. It allows XSS via... CVE-2021-3135 6.1 MediumJuly 19, 2021
• tagdiv newspaper The newspaper theme before 6.7.2 for WordPress has a lack of options access control via... CVE-2016-10972 EPSS 10.8% 9.8 CriticalSeptember 16, 2019
• tagdiv newspaper The newspaper theme before 6.7.2 for WordPress has script injection via td_ads[header] to admin... CVE-2017-18634 9.8 CriticalSeptember 16, 2019