Tagdiv Composer vulnerabilities

• tagdiv composer tagDiv Composer <= 5.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2026-12561 6.4 MediumAugust 25, 2026
• tagdiv composer WordPress tagDiv Composer plugin <= 5.4.3 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2026-57734 7.1 HighJuly 13, 2026
• tagdiv composer WordPress tagDiv Composer plugin <= 5.4.3 - Arbitrary Shortcode Execution vulnerability CVE-2026-39712 5.3 MediumApril 8, 2026
• tagdiv composer WordPress tagDiv Composer plugin <= 5.4.3 - Cross Site Scripting (XSS) vulnerability CVE-2026-39692 6.5 MediumApril 8, 2026
• tagdiv composer WordPress tagDiv Composer plugin <= 5.4.2 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-50001 7.1 HighMarch 19, 2026
• tagdiv composer WordPress tagDiv Composer plugin <= 5.4.2 - Cross Site Scripting (XSS) vulnerability CVE-2025-50005 6.5 MediumJanuary 22, 2026
• tagdiv composer WordPress tagDiv Composer plugin <= 5.4.1 - Cross Site Scripting (XSS) vulnerability CVE-2025-62031 7.1 HighNovember 6, 2025
• tagdiv composer WordPress tagDiv Composer plugin <= 5.4.1 - Cross Site Scripting (XSS) vulnerability CVE-2025-62030 6.5 MediumNovember 6, 2025
• tagdiv composer tagDiv Composer <= 5.3 - Reflected Cross-Site Scripting via 'data' CVE-2025-2806 6.1 MediumMay 8, 2025
• tagdiv composer tagDiv Composer <= 5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes CVE-2025-3510 6.4 MediumMay 2, 2025
• tagdiv composer TagDiv Composer <= 5.3 - Unauthenticated Arbitrary PHP Object Instantiation CVE-2024-13645 9.8 CriticalApril 4, 2025
• tagdiv composer tagDiv Composer <= 5.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting CVE-2025-1705 6.1 MediumMarch 28, 2025
• tagdiv composer tagDiv Composer <= 5.3 - Reflected Cross-Site Scripting via 'account_id' and 'account_username' CVE-2025-2804 6.1 MediumMarch 28, 2025
• tagdiv composer tagDiv Composer <= 5.0 - Reflected Cross-Site Scripting via envato_code[] CVE-2024-5212 6.1 MediumAugust 31, 2024
• tagdiv composer tagDiv Composer <= 5.0 - Reflected Cross-Site Scripting via envato_code[] CVE-2024-3886 6.1 MediumAugust 31, 2024
• tagdiv composer tagDiv Composer <= 4.8 - Authenticated (Contributor+) Local File Inclusion via Shortcode CVE-2024-3813 8.8 HighJune 15, 2024
• tagdiv composer tagDiv Composer <= 4.8 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment Meta CVE-2024-3814 5.5 MediumJune 15, 2024
• tagdiv composer tagDiv Composer <= 4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via button Shortcode CVE-2024-3888 6.4 MediumJune 4, 2024
• tagdiv composer WordPress tagDiv Composer Plugin < 4.4 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-39166 7.1 HighNovember 13, 2023
• tagdiv composer, unknown tagdiv composer +1 more tagDiv Composer < 4.2 - Admin+ Stored XSS CVE-2023-3170 4.8 MediumSeptember 11, 2023
• tagdiv composer, unknown tagdiv composer +1 more tagDiv Composer < 4.2 - Unauthenticated Stored XSS CVE-2023-3169 6.1 MediumSeptember 11, 2023
• tagdiv composer, unknown tagdiv composer +1 more tagDiv Composer < 4.0 - Reflected Cross-site Scripting CVE-2023-1596 6.1 MediumMay 15, 2023
• macho themes newsmag, newspaper project newspaper, tagdiv composer +2 more tagDiv Composer < 3.5 - Unauthenticated Account Takeover CVE-2022-3477 9.8 CriticalNovember 14, 2022