TagDiv tagDiv Composer

• CVE-2026-12561 Medium 6.4 tagDiv Composer <= 5.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
• CVE-2026-57734 High 7.1 WordPress tagDiv Composer plugin <= 5.4.3 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2026-39712 Medium 5.3 WordPress tagDiv Composer plugin <= 5.4.3 - Arbitrary Shortcode Execution vulnerability 0.2%
• CVE-2026-39692 Medium 6.5 WordPress tagDiv Composer plugin <= 5.4.3 - Cross Site Scripting (XSS) vulnerability 0.1%
• CVE-2025-50001 High 7.1 WordPress tagDiv Composer plugin <= 5.4.2 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2025-50005 Medium 6.5 WordPress tagDiv Composer plugin <= 5.4.2 - Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2025-62031 High 7.1 WordPress tagDiv Composer plugin <= 5.4.1 - Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2025-62030 Medium 6.5 WordPress tagDiv Composer plugin <= 5.4.1 - Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2025-2806 Medium 6.1 tagDiv Composer <= 5.3 - Reflected Cross-Site Scripting via 'data' 0.3%
• CVE-2025-3510 Medium 6.4 tagDiv Composer <= 5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes 0.3%
• CVE-2024-13645 Critical 9.8 TagDiv Composer <= 5.3 - Unauthenticated Arbitrary PHP Object Instantiation 0.7%
• CVE-2025-1705 Medium 6.1 tagDiv Composer <= 5.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting 0.4%
• CVE-2025-2804 Medium 6.1 tagDiv Composer <= 5.3 - Reflected Cross-Site Scripting via 'account_id' and 'account_username' 0.3%
• CVE-2024-3886 Medium 6.1 tagDiv Composer <= 5.0 - Reflected Cross-Site Scripting via envato_code[] 0.4%
• CVE-2024-5212 Medium 6.1 tagDiv Composer <= 5.0 - Reflected Cross-Site Scripting via envato_code[] 0.4%
• CVE-2024-3813 High 8.8 tagDiv Composer <= 4.8 - Authenticated (Contributor+) Local File Inclusion via Shortcode 0.7%
• CVE-2024-3814 Medium 5.5 tagDiv Composer <= 4.8 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment Meta 0.3%
• CVE-2024-3888 Medium 6.4 tagDiv Composer <= 4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via button Shortcode 0.3%
• CVE-2023-39166 High 7.1 WordPress tagDiv Composer Plugin < 4.4 is vulnerable to Cross Site Request Forgery (CSRF) 0.2%
• CVE-2022-3477 Critical 9.8 tagDiv Composer < 3.5 - Unauthenticated Account Takeover 4.0%