Medium
CVE-2026-12561
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 23
Reset filters
Medium
CVE-2026-57734
tagDiv Composer <= 5.4.5 - Reflected Cross-Site Scripting
Medium
CVE-2025-50001
tagDiv Composer <= 5.4.2 - Reflected Cross-Site Scripting
Medium
CVE-2026-39712
tagDiv Composer <= 5.4.4 - Unauthenticated Arbitrary Shortcode Execution
Medium
CVE-2026-39692
tagDiv Composer <= 5.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-50005
tagDiv Composer <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-62030
tagDiv Composer <= 5.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-62031
tagDiv Composer <= 5.4.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-2806
tagDiv Composer <= 5.3 - Reflected Cross-Site Scripting via 'data'
Medium
CVE-2025-3510
tagDiv Composer <= 5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes
Critical
CVE-2024-13645
TagDiv Composer <= 5.3 - Unauthenticated Arbitrary PHP Object Instantiation
Medium
CVE-2025-1705
tagDiv Composer <= 5.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-2804
tagDiv Composer <= 5.3 - Reflected Cross-Site Scripting via 'account_id' and 'account_username'
Medium
CVE-2024-3886
tagDiv Composer <= 5.0 - Reflected Cross-Site Scripting via envato_code[]
Medium
CVE-2024-5212
tagDiv Composer <= 5.0 - Reflected Cross-Site Scripting via envato_code[]
Medium
CVE-2024-3888
tagDiv Composer <= 4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via button Shortcode
High
CVE-2024-3813
tagDiv Composer <= 4.8 - Authenticated (Contributor+) Local File Inclusion via Shortcode
Medium
CVE-2024-3814
tagDiv Composer <= 4.8 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment Meta
High
CVE-2023-3169
tagDiv Composer <= 4.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-3170
tagDiv Composer <= 4.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-39166
tagDiv Composer < 4.4 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
CVE-2023-1596
tagDiv Composer < 4.0 - Reflected Cross-Site Scripting via ‘td_video_url’
Critical
CVE-2022-3477
tagDiv Composer < 3.5 - Unauthorized Account Access and Privilege Escalation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.