Read the docs

tagDiv

Records40All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high12CVSS 7.0–8.9

Exploited now

tagDiv records in CISA KEV

No tagDiv vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Tagdiv Composer 8 records MEDIUM Newspaper 6 records MEDIUM Composer 2 records MEDIUM Cloud Library 1 record HIGH Newsmag 1 record LOW

Records

1 record in Cloud Library · all components

TI-2023-01506 CVE-2023-1597 · GHSA-32v6-f8xf-f75q

tagDiv Cloud Library < 2.7 - Unauthenticated Arbitrary User Metadata Update to Privilege Escalation

Priority HIGH 73

The tagDiv Cloud Library WordPress plugin before 2.7 does not have authorisation and CSRF in an AJAX action accessible to both unauthenticated and authenticated users, allowing unauthenticated users to change arbitrary u…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00492 Published 2023-07-10 Fixed in 2.7
Open these records in search →