High · 7.1 CVE-2023-39166 EUVD-2023-42901GHSA-p58v-p4q5-5r63

WordPress tagDiv Composer Plugin < 4.4 is vulnerable to Cross Site Request Forgery (CSRF)

Published Nov 13, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in tagDiv tagDiv Composer allows Cross-Site Scripting (XSS).This issue affects tagDiv Composer: from n/a before 4.4.

Affected products

Vendor	Product	Affected	Fixed
tagDiv	tagDiv Composer	< 4.4	4.4

References

https://patchstack.com/database/vulnerability/td-composer/wordpress-tagdiv-composer-plugin-4-1-csrf-to-xss-vulnerability?_s_id=cve vdb-entry