Skip to content
OpenAdvisories

Product · tagDiv

tagDiv Opt-In Builder

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 8.5
    CVE-2026-96329

    WordPress tagDiv Opt-In Builder plugin <= 1.7.6 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in tagDiv tagDiv Opt-In Builder td-subscription allows Blind SQL Injection.This issue affects tagDiv Opt-In Builder: from n/a through 1.7.6.

    tagDiv tagDiv Opt-In Builder
  • High 7.1
    CVE-2026-57732

    WordPress tagDiv Opt-In Builder plugin <= 1.7.4 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv Opt-In Builder td-subscription allows DOM-Based XSS.This issue affects tagDiv Opt-In Builder: from n/a through <= 1.7.4.

    tagDiv tagDiv Opt-In Builder
  • High 7.1
    CVE-2025-53222

    WordPress tagDiv Opt-In Builder plugin <= 1.7.3 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv Opt-In Builder td-subscription allows Reflected XSS.This issue affects tagDiv Opt-In Builder: from n/a through <= 1.7.3.

    tagDiv tagDiv Opt-In Builder
  • High 7.2
    CVE-2023-3416

    tagDiv Opt-In Builder <= 1.4.4 - Authenticated (Admin+) SQL Injection

    The tagDiv Opt-In Builder plugin is vulnerable to Blind SQL Injection via the 'subscriptionCouponId' parameter via the 'create_stripe_subscription' REST API endpoint in versions up to, and including, 1.4.4 due to insufficient escaping on the user supplied par…

    tagDiv tagDiv Opt-In Builder
  • High 7.2
    CVE-2023-3419

    tagDiv Opt-In Builder <= 1.4.4 - Authenticated (Admin+) SQL Injection

    The tagDiv Opt-In Builder plugin is vulnerable to Blind SQL Injection via the 'couponId' parameter of the 'recreate_stripe_subscription' REST API endpoint in versions up to, and including, 1.4.4 due to insufficient escaping on the user supplied parameter and …

    tagDiv tagDiv Opt-In Builder