TTagDiv

Products

Exploited and recent CVEs

• CVE-2026-96330 Critical 9.3 WordPress tagDiv Opt-In Builder plugin <= 1.7.6 - SQL Injection vulnerability 0.2%
• CVE-2026-96329 High 8.5 WordPress tagDiv Opt-In Builder plugin <= 1.7.6 - SQL Injection vulnerability 0.2%
• CVE-2026-12561 Medium 6.4 tagDiv Composer <= 5.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
• CVE-2026-57734 High 7.1 WordPress tagDiv Composer plugin <= 5.4.3 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2026-57733 High 7.1 WordPress tagDiv Cloud Library plugin <= 3.9.4 - Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2026-57732 High 7.1 WordPress tagDiv Opt-In Builder plugin <= 1.7.4 - Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2026-39712 Medium 5.3 WordPress tagDiv Composer plugin <= 5.4.3 - Arbitrary Shortcode Execution vulnerability 0.2%
• CVE-2026-39692 Medium 6.5 WordPress tagDiv Composer plugin <= 5.4.3 - Cross Site Scripting (XSS) vulnerability 0.1%
• CVE-2025-53222 High 7.1 WordPress tagDiv Opt-In Builder plugin <= 1.7.3 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2025-50001 High 7.1 WordPress tagDiv Composer plugin <= 5.4.2 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2025-50005 Medium 6.5 WordPress tagDiv Composer plugin <= 5.4.2 - Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2025-62032 Medium 6.5 WordPress tagDiv Cloud Library plugin < 3.9.2 - Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2025-62031 High 7.1 WordPress tagDiv Composer plugin <= 5.4.1 - Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2025-62030 Medium 6.5 WordPress tagDiv Composer plugin <= 5.4.1 - Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2025-2806 Medium 6.1 tagDiv Composer <= 5.3 - Reflected Cross-Site Scripting via 'data' 0.3%
• CVE-2025-3510 Medium 6.4 tagDiv Composer <= 5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes 0.3%
• CVE-2025-2890 Medium 6.5 tagDiv Opt-In Builder <= 1.7 - Authenticated (Subscriber+) SQL Injection via subscriptionCouponId Parameter 0.4%
• CVE-2024-13645 Critical 9.8 TagDiv Composer <= 5.3 - Unauthenticated Arbitrary PHP Object Instantiation 0.7%
• CVE-2025-1705 Medium 6.1 tagDiv Composer <= 5.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting 0.4%
• CVE-2025-2804 Medium 6.1 tagDiv Composer <= 5.3 - Reflected Cross-Site Scripting via 'account_id' and 'account_username' 0.3%
• CVE-2024-3886 Medium 6.1 tagDiv Composer <= 5.0 - Reflected Cross-Site Scripting via envato_code[] 0.4%
• CVE-2024-5212 Medium 6.1 tagDiv Composer <= 5.0 - Reflected Cross-Site Scripting via envato_code[] 0.4%
• CVE-2023-3416 High 7.2 tagDiv Opt-In Builder <= 1.4.4 - Authenticated (Admin+) SQL Injection 0.6%
• CVE-2023-3419 High 7.2 tagDiv Opt-In Builder <= 1.4.4 - Authenticated (Admin+) SQL Injection 0.6%
• CVE-2024-3813 High 8.8 tagDiv Composer <= 4.8 - Authenticated (Contributor+) Local File Inclusion via Shortcode 0.7%
• CVE-2024-3814 Medium 5.5 tagDiv Composer <= 4.8 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment Meta 0.3%
• CVE-2024-3888 Medium 6.4 tagDiv Composer <= 4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via button Shortcode 0.3%
• CVE-2023-39166 High 7.1 WordPress tagDiv Composer Plugin < 4.4 is vulnerable to Cross Site Request Forgery (CSRF) 0.2%
• CVE-2022-3477 Critical 9.8 tagDiv Composer < 3.5 - Unauthenticated Account Takeover 4.0%
• CVE-2022-3477 Critical 9.8 tagDiv Composer < 3.5 - Unauthenticated Account Takeover 4.0%