| CVE-2026-12561 |
The tagDiv Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the vc_raw_html shortcode in…
|
6.4
Medium
|
Aug 25, 2026 |
| CVE-2026-57734 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv…
|
7.1
High
|
Jul 13, 2026 |
| CVE-2026-39712 |
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in tagDiv tagDiv Composer…
|
5.3
Medium
|
Apr 8, 2026 |
| CVE-2026-39692 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv…
|
6.5
Medium
|
Apr 8, 2026 |
| CVE-2025-50001 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv…
|
7.1
High
|
Mar 19, 2026 |
| CVE-2025-50005 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv…
|
6.5
Medium
|
Jan 22, 2026 |
| CVE-2025-62031 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv…
|
7.1
High
|
Nov 6, 2025 |
| CVE-2025-62030 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv…
|
6.5
Medium
|
Nov 6, 2025 |
| CVE-2025-2806 |
The tagDiv Composer plugin for WordPress, used by the Newspaper theme, is vulnerable to Reflected Cross-Site Scripting…
|
6.1
Medium
|
May 8, 2025 |
| CVE-2025-3510 |
The tagDiv Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple shortcodes in all…
|
6.4
Medium
|
May 2, 2025 |
| CVE-2024-13645 |
The tagDiv Composer plugin for WordPress is vulnerable to PHP Object Instantiation in all versions up to, and including,…
|
9.8
Critical
|
Apr 4, 2025 |
| CVE-2025-1705 |
The tagDiv Composer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and…
|
6.1
Medium
|
Mar 28, 2025 |
| CVE-2025-2804 |
The tagDiv Composer plugin for WordPress, used by the Newspaper theme, is vulnerable to Reflected Cross-Site Scripting…
|
6.1
Medium
|
Mar 28, 2025 |
| CVE-2024-5212 |
The tagDiv Composer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘envato_code[]’…
|
6.1
Medium
|
Aug 31, 2024 |
| CVE-2024-3886 |
The tagDiv Composer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘envato_code[]’…
|
6.1
Medium
|
Aug 31, 2024 |
| CVE-2024-3813 |
The tagDiv Composer plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.8…
|
8.8
High
|
Jun 15, 2024 |
| CVE-2024-3814 |
The tagDiv Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'single' module…
|
5.5
Medium
|
Jun 15, 2024 |
| CVE-2024-3888 |
The tagDiv Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's button…
|
6.4
Medium
|
Jun 4, 2024 |
| CVE-2023-39166 |
Cross-Site Request Forgery (CSRF) vulnerability in tagDiv tagDiv Composer allows Cross-Site Scripting (XSS).This issue…
|
7.1
High
|
Nov 13, 2023 |
| CVE-2022-3477 |
The tagDiv Composer WordPress plugin before 3.5, required by the Newspaper WordPress theme before 12.1 and Newsmag…
|
9.8
Critical
|
Nov 14, 2022 |