9.8
Critique
CVE-2022-3477 The tagDiv Composer WordPress plugin before 3.5, required by the Newspaper WordPress theme before 12.1 and Newsmag…
Description
The tagDiv Composer WordPress plugin before 3.5, required by the Newspaper WordPress theme before 12.1 and Newsmag WordPress theme before 5.2.2, does not properly implement the Facebook login feature, allowing unauthenticated attackers to login as any user by just knowing their email address
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| tagDiv Composer 3.5 | premières → < 3.5 | 3.5 |
| Newspaper 12.1 | premières → < 12.1 | 12.1 |
| Newsmag 5.2 | premières → < 5.2.2 | 5.2.2 |
Autres CVE de tagDiv Composer
Les 20 CVE de tagDiv Composer →
CVE-2026-12561
The tagDiv Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the vc_raw_html shortcode in…
6.4
Moyenne
CVE-2026-57734
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv…
7.1
Élevée
CVE-2026-39712
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in tagDiv tagDiv Composer…
5.3
Moyenne
CVE-2026-39692
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv…
6.5
Moyenne