Advisories · Technology

tagDiv Composer.

Every CVE that names tagDiv Composer among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-12561 CVE record

CVSS 6.4 Medium

tagDiv Composer <= 5.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
- tagDiv Composer
- Cross-site scripting (XSS)
Not analysed yet 25 Aug 2026
CVE-2026-57734 CVE record

CVSS 7.1 High

WordPress tagDiv Composer plugin <= 5.4.3 - Reflected Cross Site Scripting (XSS) vulnerability
- tagDiv Composer
- Cross-site scripting (XSS)
Not analysed yet 13 Jul 2026
CVE-2026-39712 CVE record

CVSS 5.3 Medium

WordPress tagDiv Composer plugin <= 5.4.3 - Arbitrary Shortcode Execution vulnerability
- tagDiv Composer
- Cross-site scripting (XSS)
Not analysed yet 8 Apr 2026
CVE-2026-39692 CVE record

CVSS 6.5 Medium

WordPress tagDiv Composer plugin <= 5.4.3 - Cross Site Scripting (XSS) vulnerability
- tagDiv Composer
- Cross-site scripting (XSS)
Not analysed yet 8 Apr 2026
CVE-2025-50001 CVE record

CVSS 7.1 High

WordPress tagDiv Composer plugin <= 5.4.2 - Reflected Cross Site Scripting (XSS) vulnerability
- tagDiv Composer
- Cross-site scripting (XSS)
Not analysed yet 19 Mar 2026
CVE-2025-50005 CVE record

CVSS 6.5 Medium

WordPress tagDiv Composer plugin <= 5.4.2 - Cross Site Scripting (XSS) vulnerability
- tagDiv Composer
- Cross-site scripting (XSS)
Not analysed yet 22 Jan 2026
CVE-2025-62031 CVE record

CVSS 7.1 High

WordPress tagDiv Composer plugin <= 5.4.1 - Cross Site Scripting (XSS) vulnerability
- tagDiv Composer
- Cross-site scripting (XSS)
Not analysed yet 6 Nov 2025
CVE-2025-62030 CVE record

CVSS 6.5 Medium

WordPress tagDiv Composer plugin <= 5.4.1 - Cross Site Scripting (XSS) vulnerability
- tagDiv Composer
- Cross-site scripting (XSS)
Not analysed yet 6 Nov 2025
CVE-2025-2806 CVE record

CVSS 6.1 Medium

tagDiv Composer <= 5.3 - Reflected Cross-Site Scripting via 'data'
- tagDiv Composer
- Cross-site scripting (XSS)
Not analysed yet 8 May 2025
CVE-2025-3510 CVE record

CVSS 6.4 Medium

tagDiv Composer <= 5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes
- tagDiv Composer
- Cross-site scripting (XSS)
Not analysed yet 2 May 2025
CVE-2024-13645 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

TagDiv Composer <= 5.3 - Unauthenticated Arbitrary PHP Object Instantiation
- tagDiv Composer
- Code injection
Not analysed yet 4 Apr 2025
CVE-2025-1705 CVE record

CVSS 6.1 Medium

tagDiv Composer <= 5.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
- tagDiv Composer
- Cross-site scripting (XSS)
Not analysed yet 28 Mar 2025
CVE-2025-2804 CVE record

CVSS 6.1 Medium

tagDiv Composer <= 5.3 - Reflected Cross-Site Scripting via 'account_id' and 'account_username'
- tagDiv Composer
- Cross-site scripting (XSS)
Not analysed yet 28 Mar 2025
CVE-2024-3886 CVE record

CVSS 6.1 Medium

tagDiv Composer <= 5.0 - Reflected Cross-Site Scripting via envato_code[]
- tagDiv Composer
- Cross-site scripting (XSS)
Not analysed yet 31 Aug 2024
CVE-2024-5212 CVE record

CVSS 6.1 Medium

tagDiv Composer <= 5.0 - Reflected Cross-Site Scripting via envato_code[]
- tagDiv Composer
- Cross-site scripting (XSS)
Not analysed yet 31 Aug 2024
CVE-2024-3813 CVE record

CVSS 8.8 High

tagDiv Composer <= 4.8 - Authenticated (Contributor+) Local File Inclusion via Shortcode
- tagDiv Composer
- File inclusion
Not analysed yet 15 Jun 2024
CVE-2024-3814 CVE record

CVSS 5.5 Medium

tagDiv Composer <= 4.8 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment Meta
- tagDiv Composer
- Cross-site scripting (XSS)
Not analysed yet 15 Jun 2024
CVE-2024-3888 CVE record

CVSS 6.4 Medium

tagDiv Composer <= 4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via button Shortcode
- tagDiv Composer
- Cross-site scripting (XSS)
Not analysed yet 4 Jun 2024
CVE-2023-39166 CVE record

CVSS 7.1 High

WordPress tagDiv Composer Plugin < 4.4 is vulnerable to Cross Site Request Forgery (CSRF)
- tagDiv Composer
- Cross-site request forgery (CSRF)
Not analysed yet 13 Nov 2023
CVE-2023-3170 CVE record

CVSS 4.8 Medium

tagDiv Composer < 4.2 - Admin+ Stored XSS
- tagDiv Composer
Not analysed yet 11 Sept 2023
CVE-2023-3169 CVE record

CVSS 6.1 Medium

tagDiv Composer < 4.2 - Unauthenticated Stored XSS
- tagDiv Composer
Not analysed yet 11 Sept 2023
CVE-2023-1596 CVE record

CVSS 6.1 Medium

tagDiv Composer < 4.0 - Reflected Cross-site Scripting
- tagDiv Composer
Not analysed yet 15 May 2023
CVE-2022-3477 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

tagDiv Composer < 3.5 - Unauthenticated Account Takeover
- tagDiv Composer
- tagDiv Newspaper
- Authentication bypass
Not analysed yet 14 Nov 2022