CVE Database /
CVE-2025-50001
CVE · High
CVE-2025-50001 — tagDiv Composer [td-composer] < 5.4.3
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2025-50001
|
tagDiv Composer [td-composer] < 5.4.3 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
High
7.1
|
< 5.4.3
|
5.4.3 |
2026-03-10 |
—
|
CVE-2025-50001
The tagDiv Composer plugin for WordPress contains a security flaw in versions 5.4.2 and earlier, allowing malicious actors to inject unauthorized code onto websites through carefully crafted links or other user interactions. This vulnerability arises from inadequate measures to scrub potentially hazardous input data before it's displayed on the site. As a result, users may inadvertently execute arbitrary scripts if they click on a specially designed link.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings