WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
tcbd-popover
Published
2024-12-13
Title
TCBD Popover <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
tcbd-tooltip
Published
2025-02-20
Title
TCBD Tooltip <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
tcd-google-maps
Published
2023-10-22
Title
TCD Google Maps <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
tcs3
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
td-cloud-library
Published
2023-06-19
Title
tagDiv Cloud Library < 2.7 - Unauthenticated Arbitrary User Metadata Update to Privilege Escalation
Slug
td-cloud-library
Published
2025-10-16
Title
tagDiv Cloud Library < 3.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
td-composer
Published
2022-10-24
Title
tagDiv Composer < 3.5 - Unauthenticated Account Takeover
Slug
td-composer
Published
2023-04-24
Title
tagDiv Composer < 4.0 - Reflected Cross-site Scripting
Slug
td-composer
Published
2023-08-17
Title
tagDiv Composer < 4.2 - Unauthenticated Stored XSS
Slug
td-composer
Published
2023-08-17
Title
tagDiv Composer < 4.2 - Admin+ Stored XSS
Slug
td-composer
Published
2024-06-03
Title
tagDiv Composer < 4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via button Shortcode
Slug
td-composer
Published
2024-04-18
Title
tagDiv Composer < 4.9 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment Meta
Slug
td-composer
Published
2024-04-18
Title
tagDiv Composer < 4.9 - Authenticated (Contributor+) Local File Inclusion via Shortcode
Slug
td-composer
Published
2024-08-30
Title
tagDiv Composer < 5.1 - Reflected Cross-Site Scripting via envato_code[]
Slug
td-composer
Published
2024-08-30
Title
tagDiv Composer < 5.1 - Reflected Cross-Site Scripting via envato_code[]
Slug
td-composer
Published
2025-03-27
Title
tagDiv Composer < 5.4 - Reflected Cross-Site Scripting via 'account_id' and 'account_username'
Slug
td-composer
Published
2025-03-27
Title
tagDiv Composer < 5.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
td-composer
Published
2025-04-03
Title
TagDiv Composer < 5.4 - Unauthenticated Arbitrary PHP Object Instantiation
Slug
td-composer
Published
2025-05-01
Title
tagDiv Composer < 5.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes
Slug
td-composer
Published
2025-05-07
Title
tagDiv Composer < 5.4 - Reflected Cross-Site Scripting via 'data'
Slug
td-composer
Published
2025-10-16
Title
tagDiv Composer < 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
td-composer
Published
2025-10-09
Title
tagDiv Composer < 5.4.2 - Unauthenticated Stored Cross-Site Scripting
Slug
td-composer
Published
2026-01-08
Title
tagDiv Composer < 5.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
td-composer
Published
2026-03-10
Title
tagDiv Composer < 5.4.3 - Reflected Cross-Site Scripting
Slug
td-subscription
Published
2024-08-16
Title
tagDiv Opt-In Builder < 1.5 - Authenticated (Admin+) SQL Injection