PatchSiren

tagDiv CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH tagDiv CVE published 2026-07-13

CVE-2026-57734

CVE-2026-57734 is a Cross-site Scripting vulnerability in tagDiv Composer, a WordPress plugin used for creating and managing content. The vulnerability is caused by improper neutralization of input during web page generation, allowing attackers to inject malicious scripts. The CVE record was published on 2026-07-13T10:16:39.997Z and has not been modified since then. The NVD entry is currently 7.1 HIGH, in [truncated]

HIGH tagDiv CVE published 2026-07-13

CVE-2026-57733

A Cross-site Scripting vulnerability was found in tagDiv Cloud Library, a popular WordPress plugin used for creating and managing cloud-based libraries. This issue allows attackers to inject malicious scripts into web pages, potentially leading to unauthorized actions or data theft. The vulnerability, tracked as CVE-2026-57733, affects tagDiv Cloud Library versions from n/a through <= 3.9.4. Administrator [truncated]

HIGH tagDiv CVE published 2026-07-13

CVE-2026-57732

AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-07-13T10:16:39.767Z and has not been modified since then. The vulnerability affects tagDiv Opt-In Builder plugin, allowing DOM-Based XSS attacks. The vulnerability has a CVSS score of 7.1 and is classified as HIGH severity. Users of tagDiv Opt-In Builder plugin versions up to 1.7.4 should apply patches [truncated]