Tagdiv vulnerabilities
29 CVEs and advisories name Tagdiv as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-96330WordPress tagDiv Opt-In Builder plugin <= 1.7.6 - SQL Injection vulnerability
- CVE-2026-96329WordPress tagDiv Opt-In Builder plugin <= 1.7.6 - SQL Injection vulnerability
- CVE-2026-12561tagDiv Composer <= 5.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2026-57734WordPress tagDiv Composer plugin <= 5.4.3 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2026-57733WordPress tagDiv Cloud Library plugin <= 3.9.4 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-57732WordPress tagDiv Opt-In Builder plugin <= 1.7.4 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-39712WordPress tagDiv Composer plugin <= 5.4.3 - Arbitrary Shortcode Execution vulnerability
- CVE-2026-39692WordPress tagDiv Composer plugin <= 5.4.3 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-53222WordPress tagDiv Opt-In Builder plugin <= 1.7.3 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2025-50001WordPress tagDiv Composer plugin <= 5.4.2 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2025-50005WordPress tagDiv Composer plugin <= 5.4.2 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-62032WordPress tagDiv Cloud Library plugin < 3.9.2 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-62031WordPress tagDiv Composer plugin <= 5.4.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-62030WordPress tagDiv Composer plugin <= 5.4.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-2806tagDiv Composer <= 5.3 - Reflected Cross-Site Scripting via 'data'
- CVE-2025-3510tagDiv Composer <= 5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes
- CVE-2025-2890tagDiv Opt-In Builder <= 1.7 - Authenticated (Subscriber+) SQL Injection via subscriptionCouponId Parameter
- CVE-2024-13645TagDiv Composer <= 5.3 - Unauthenticated Arbitrary PHP Object Instantiation
- CVE-2025-1705tagDiv Composer <= 5.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
- CVE-2025-2804tagDiv Composer <= 5.3 - Reflected Cross-Site Scripting via 'account_id' and 'account_username'
- CVE-2024-3886tagDiv Composer <= 5.0 - Reflected Cross-Site Scripting via envato_code[]
- CVE-2024-5212tagDiv Composer <= 5.0 - Reflected Cross-Site Scripting via envato_code[]
- CVE-2023-3416tagDiv Opt-In Builder <= 1.4.4 - Authenticated (Admin+) SQL Injection
- CVE-2023-3419tagDiv Opt-In Builder <= 1.4.4 - Authenticated (Admin+) SQL Injection
- CVE-2024-3813tagDiv Composer <= 4.8 - Authenticated (Contributor+) Local File Inclusion via Shortcode
- CVE-2024-3814tagDiv Composer <= 4.8 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment Meta
- CVE-2024-3888tagDiv Composer <= 4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via button Shortcode
- CVE-2023-39166WordPress tagDiv Composer Plugin < 4.4 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-3477tagDiv Composer < 3.5 - Unauthenticated Account Takeover