Tagdiv Tagdiv Composer — known CVE vulnerabilities

Every CVE whose affected-product data names Tagdiv Tagdiv Composer, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (8)

• CVE-2024-3813 — CVSS 8.8 (high): The tagDiv Composer plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.8 via the…
• CVE-2023-39166 — CVSS 7.1 (high): Cross-Site Request Forgery (CSRF) vulnerability in tagDiv tagDiv Composer allows Cross-Site Scripting (XSS).This issue affects tagDiv…
• CVE-2023-3169 — CVSS 6.1 (medium): The tagDiv Composer WordPress plugin before 4.2, used as a companion by the Newspaper and Newsmag themes from tagDiv, does not have…
• CVE-2024-5212 — CVSS 6.1 (medium): The tagDiv Composer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘envato_code[]’ parameter in all…
• CVE-2025-2806 — CVSS 6.1 (medium): The tagDiv Composer plugin for WordPress, used by the Newspaper theme, is vulnerable to Reflected Cross-Site Scripting via the ‘data’…
• CVE-2024-3886 — CVSS 6.1 (medium): The tagDiv Composer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘envato_code[]’ parameter in all…
• CVE-2024-3814 — CVSS 5.5 (medium): The tagDiv Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'single' module in all versions up…
• CVE-2023-3170 — CVSS 4.8 (medium): The tagDiv Composer WordPress plugin before 4.2, used as a companion by the Newspaper and Newsmag themes from tagDiv, does not validate and…