| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2024-3888 | tagDiv Composer <= 4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via button Shortcode | tagDiv | tagDiv Composer | Medium | 6.4 | 2024-06-04 04:30:31 | Deep Dive |
| CVE-2023-39166 | WordPress tagDiv Composer Plugin < 4.4 is vulnerable to Cross Site Request Forgery (CSRF) | tagDiv | tagDiv Composer | High | 7.1 | 2023-11-13 16:58:54 | Deep Dive |
| CVE-2023-3170 | tagDiv Composer < 4.2 - Admin+ Stored XSS | Unknown | tagDiv Composer | 中危 | - | 2023-09-11 19:46:09 | Deep Dive |
| CVE-2023-3169 | tagDiv Composer < 4.2 - Unauthenticated Stored XSS | Unknown | tagDiv Composer | 中危 | - | 2023-09-11 19:46:07 | Deep Dive |
| CVE-2023-1597 | tagDiv Cloud Library < 2.7 - Unauthenticated Arbitrary User Metadata Update to Privilege Escalation | Unknown | tagDiv Cloud Library | 高危 | - | 2023-07-10 12:40:40 | Deep Dive |
| CVE-2023-1596 | tagDiv Composer < 4.0 - Reflected Cross-site Scripting | Unknown | tagDiv Composer | 中危 | - | 2023-05-15 12:15:37 | Deep Dive |
| CVE-2022-3477 | tagDiv Composer < 3.5 - Unauthenticated Account Takeover | tagDiv | tagDiv Composer | 超危 | - | 2022-11-14 00:00:00 | Deep Dive |