Tagdiv Composer

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest
CVE-2025-2806 MEDIUM This Month

The tagDiv Composer plugin for WordPress, used by the Newspaper theme, is vulnerable to Reflected Cross-Site Scripting via the ‘data’ parameter in all versions up to, and including, 5.3 due to. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress XSS Tagdiv Composer PHP
NVD
CVSS 3.1
6.1
EPSS
0.5%
CVE-2025-2806
EPSS 1% CVSS 6.1
MEDIUM This Month

The tagDiv Composer plugin for WordPress, used by the Newspaper theme, is vulnerable to Reflected Cross-Site Scripting via the ‘data’ parameter in all versions up to, and including, 5.3 due to. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress XSS Tagdiv Composer +1
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy