Skip to content
OpenAdvisories

Vendor

tagDiv

29 known vulnerabilities.

Products

tagDiv Composer 20 tagDiv Opt-In Builder 7 tagDiv Cloud Library 2 Newspaper 1 Newsmag 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-96330

    WordPress tagDiv Opt-In Builder plugin <= 1.7.6 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in tagDiv tagDiv Opt-In Builder td-subscription allows Blind SQL Injection.This issue affects tagDiv Opt-In Builder: from n/a through 1.7.6.

    tagDiv tagDiv Opt-In Builder
  • Critical 9.8
    CVE-2024-13645

    TagDiv Composer <= 5.3 - Unauthenticated Arbitrary PHP Object Instantiation

    The tagDiv Composer plugin for WordPress is vulnerable to PHP Object Instantiation in all versions up to, and including, 5.3 via module parameter. This makes it possible for unauthenticated attackers to Instantiate a PHP Object. No known POP chain is present …

    tagDiv tagDiv Composer Web / CMS
  • Critical 9.8
    CVE-2022-3477 Scanner template

    tagDiv Composer < 3.5 - Unauthenticated Account Takeover

    The tagDiv Composer WordPress plugin before 3.5, required by the Newspaper WordPress theme before 12.1 and Newsmag WordPress theme before 5.2.2, does not properly implement the Facebook login feature, allowing unauthenticated attackers to login as any user by…

    tagDiv tagDiv Composer Newsmag Newspaper Web / CMS