CVE-2026-57733

The tagDiv Cloud Library plugin for WordPress contains a security flaw that allows malicious code injection through unvalidated user input, which can then be executed by users accessing the compromised page, regardless of their authentication status. This vulnerability is present in versions 3.9.5 and earlier due to inadequate measures to prevent cross-site scripting attacks.

Based on public CVE data (MITRE/NVD).