tagDiv Opt-In Builder

tagDiv Opt-In Builder has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2026; all 5 are fixed as of September 2026. Their average CVSS score is 6.8, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 3 high. 2026 was the busiest year with 2 disclosures.

The most common weakness is SQL Injection, behind 3 of the records (60%). Other recurring categories include Cross-Site Scripting.

Every one of the 5 issues recorded for tagDiv Opt-In Builder has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, most of them (3) reported by Truoc Phan.

Strategic Overview

Avg CVSSMedium

6.8/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all tagDiv Opt-In Builder vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.2CVE-2026-57732

tagDiv Opt-In Builder <= 1.7.5 - Unauthenticated Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

5 records


2026-07-06 00:00	tagDiv Opt-In Builder <= 1.7.5 - Unauthenticated Stored Cross-Site Scripting tagDiv Opt-In Builder <= 1.7.5	`CVE-2026-57732`	7.2 High	Bonds	Yes
2026-03-16 00:00	tagDiv Opt-In Builder <= 1.7.3 - Reflected Cross-Site Scripting tagDiv Opt-In Builder <= 1.7.3	`CVE-2025-53222`	6.1 Medium	Bonds	Yes
2025-04-29 19:47	tagDiv Opt-In Builder <= 1.7 - Authenticated (Subscriber+) SQL Injection via subscriptionCouponId Parameter tagDiv Opt-In Builder <= 1.7	`CVE-2025-2890`	6.5 Medium	Truoc Phan	Yes
2024-08-16 00:00	tagDiv Opt-In Builder <= 1.4.4 - Authenticated (Admin+) SQL Injection tagDiv Opt-In Builder <= 1.4.4	`CVE-2023-3419`	7.2 High	Truoc Phan	Yes
2024-08-16 00:00	tagDiv Opt-In Builder <= 1.4.4 - Authenticated (Admin+) SQL Injection tagDiv Opt-In Builder <= 1.4.4	`CVE-2023-3416`	7.2 High	Truoc Phan	Yes

Showing 1–5 of 5 reports