| CVE-2026-12561 |
The tagDiv Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the vc_raw_html shortcode in…
|
6.4
Moyenne
|
25 août 2026 |
| CVE-2026-57734 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv…
|
7.1
Élevée
|
13 juil. 2026 |
| CVE-2026-39712 |
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in tagDiv tagDiv Composer…
|
5.3
Moyenne
|
8 avr. 2026 |
| CVE-2026-39692 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv…
|
6.5
Moyenne
|
8 avr. 2026 |
| CVE-2025-50001 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv…
|
7.1
Élevée
|
19 mars 2026 |
| CVE-2025-50005 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv…
|
6.5
Moyenne
|
22 janv. 2026 |
| CVE-2025-62031 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv…
|
7.1
Élevée
|
6 nov. 2025 |
| CVE-2025-62030 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv…
|
6.5
Moyenne
|
6 nov. 2025 |
| CVE-2025-2806 |
The tagDiv Composer plugin for WordPress, used by the Newspaper theme, is vulnerable to Reflected Cross-Site Scripting…
|
6.1
Moyenne
|
8 mai 2025 |
| CVE-2025-3510 |
The tagDiv Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple shortcodes in all…
|
6.4
Moyenne
|
2 mai 2025 |
| CVE-2024-13645 |
The tagDiv Composer plugin for WordPress is vulnerable to PHP Object Instantiation in all versions up to, and including,…
|
9.8
Critique
|
4 avr. 2025 |
| CVE-2025-1705 |
The tagDiv Composer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and…
|
6.1
Moyenne
|
28 mars 2025 |
| CVE-2025-2804 |
The tagDiv Composer plugin for WordPress, used by the Newspaper theme, is vulnerable to Reflected Cross-Site Scripting…
|
6.1
Moyenne
|
28 mars 2025 |
| CVE-2024-5212 |
The tagDiv Composer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘envato_code[]’…
|
6.1
Moyenne
|
31 août 2024 |
| CVE-2024-3886 |
The tagDiv Composer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘envato_code[]’…
|
6.1
Moyenne
|
31 août 2024 |
| CVE-2024-3813 |
The tagDiv Composer plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.8…
|
8.8
Élevée
|
15 juin 2024 |
| CVE-2024-3814 |
The tagDiv Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'single' module…
|
5.5
Moyenne
|
15 juin 2024 |
| CVE-2024-3888 |
The tagDiv Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's button…
|
6.4
Moyenne
|
4 juin 2024 |
| CVE-2023-39166 |
Cross-Site Request Forgery (CSRF) vulnerability in tagDiv tagDiv Composer allows Cross-Site Scripting (XSS).This issue…
|
7.1
Élevée
|
13 nov. 2023 |
| CVE-2022-3477 |
The tagDiv Composer WordPress plugin before 3.5, required by the Newspaper WordPress theme before 12.1 and Newsmag…
|
9.8
Critique
|
14 nov. 2022 |