CVEs we hold for Tagdiv

Records whose assigning authority named Tagdiv as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-57734WordPress tagDiv Composer plugin <= 5.4.3 - Reflected Cross Site Scripting (XSS) vulnerabilitytagDiv Composer

CVE-2026-57733WordPress tagDiv Cloud Library plugin <= 3.9.4 - Cross Site Scripting (XSS) vulnerabilitytagDiv Cloud Library

CVE-2026-57732WordPress tagDiv Opt-In Builder plugin <= 1.7.4 - Cross Site Scripting (XSS) vulnerabilitytagDiv Opt-In Builder

CVE-2026-39712WordPress tagDiv Composer plugin <= 5.4.3 - Arbitrary Shortcode Execution vulnerabilitytagDiv Composer

CVE-2026-39692WordPress tagDiv Composer plugin <= 5.4.3 - Cross Site Scripting (XSS) vulnerabilitytagDiv Composer

CVE-2026-12561tagDiv Composer <= 5.4.5 - Authenticated (Contributor+) Stored Cross-Site ScriptingtagDiv Composer

CVE-2025-62032WordPress tagDiv Cloud Library plugin < 3.9.2 - Cross Site Scripting (XSS) vulnerabilitytagDiv Cloud Library

CVE-2025-62031WordPress tagDiv Composer plugin <= 5.4.1 - Cross Site Scripting (XSS) vulnerabilitytagDiv Composer

CVE-2025-62030WordPress tagDiv Composer plugin <= 5.4.1 - Cross Site Scripting (XSS) vulnerabilitytagDiv Composer

CVE-2025-53222WordPress tagDiv Opt-In Builder plugin <= 1.7.3 - Reflected Cross Site Scripting (XSS) vulnerabilitytagDiv Opt-In Builder

CVE-2025-50005WordPress tagDiv Composer plugin <= 5.4.2 - Cross Site Scripting (XSS) vulnerabilitytagDiv Composer

CVE-2025-50001WordPress tagDiv Composer plugin <= 5.4.2 - Reflected Cross Site Scripting (XSS) vulnerabilitytagDiv Composer

CVE-2025-3510tagDiv Composer <= 5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple ShortcodestagDiv Composer

CVE-2025-2890tagDiv Opt-In Builder <= 1.7 - Authenticated (Subscriber+) SQL Injection via subscriptionCouponId ParametertagDiv Opt-In Builder

CVE-2025-2806tagDiv Composer <= 5.3 - Reflected Cross-Site Scripting via 'data'tagDiv Composer

CVE-2025-2804tagDiv Composer <= 5.3 - Reflected Cross-Site Scripting via 'account_id' and 'account_username'tagDiv Composer

CVE-2025-1705tagDiv Composer <= 5.3 - Cross-Site Request Forgery to Stored Cross-Site ScriptingtagDiv Composer

CVE-2024-5212tagDiv Composer <= 5.0 - Reflected Cross-Site Scripting via envato_code[]tagDiv Composer

CVE-2024-3888tagDiv Composer <= 4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via button ShortcodetagDiv Composer

CVE-2024-3886tagDiv Composer <= 5.0 - Reflected Cross-Site Scripting via envato_code[]tagDiv Composer

CVE-2024-3814tagDiv Composer <= 4.8 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment MetatagDiv Composer

CVE-2024-3813tagDiv Composer <= 4.8 - Authenticated (Contributor+) Local File Inclusion via ShortcodetagDiv Composer

CVE-2024-13645TagDiv Composer <= 5.3 - Unauthenticated Arbitrary PHP Object InstantiationtagDiv Composer

CVE-2023-39166WordPress tagDiv Composer Plugin < 4.4 is vulnerable to Cross Site Request Forgery (CSRF)tagDiv Composer

CVE-2023-3419tagDiv Opt-In Builder <= 1.4.4 - Authenticated (Admin+) SQL InjectiontagDiv Opt-In Builder

CVE-2023-3416tagDiv Opt-In Builder <= 1.4.4 - Authenticated (Admin+) SQL InjectiontagDiv Opt-In Builder

CVE-2023-3170tagDiv Composer < 4.2 - Admin+ Stored XSSUnknown tagDiv Composer

CVE-2023-3169tagDiv Composer < 4.2 - Unauthenticated Stored XSSUnknown tagDiv Composer

CVE-2023-1597tagDiv Cloud Library < 2.7 - Unauthenticated Arbitrary User Metadata Update to Privilege EscalationUnknown tagDiv Cloud Library

CVE-2023-1596tagDiv Composer < 4.0 - Reflected Cross-site ScriptingUnknown tagDiv Composer

CVE-2022-3477tagDiv Composer < 3.5 - Unauthenticated Account TakeovertagDiv Newsmag

31 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.