tagDiv Composer

Vulnerabilities 21Slug td-composerPlugin page →

Minimum safe version

5.4.3

Update to 5.4.3 or later to address 19 fixable vulnerabilities

⚠ 2 vulnerabilities have no fix
Medium 6.1
2025-05-08< 5.4

tagDiv Composer <= 5.3 - Reflected Cross-Site Scripting via 'data'

EUVDWordfenceCVE
Medium 6.4
2025-05-02< 5.4.1

tagDiv Composer <= 5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes

EUVDWordfenceCVE
Medium 6.1
2025-03-27< 5.4

tagDiv Composer <= 5.3 - Reflected Cross-Site Scripting via 'account_id' and 'account_username'

WordfenceCVE
Medium 6.1
2025-03-28< 5.4

tagDiv Composer <= 5.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting

EUVDWordfencePatchstackCVE
Medium 6.1
2024-09-02< 5.1

WordPress tagDiv Composer Plugin <= 5.0 is vulnerable to Cross Site Scripting (XSS)

PatchstackCVEWordfence