tagDiv Opt-In Builder

tagDiv Opt-In Builder has 7 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2026; all 7 are fixed as of October 2026. Their average CVSS score is 6.9, and the most serious one scores 7.5 out of 10. Severity breakdown: 0 critical and 4 high. 2026 was the busiest year with 4 disclosures.

The most common weakness is SQL Injection, behind 5 of the records (71%). Other recurring categories include Cross-Site Scripting.

Every one of the 7 issues recorded for tagDiv Opt-In Builder has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, most of them (3) reported by Truoc Phan.

Strategic Overview

Avg CVSSMedium

6.9/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all tagDiv Opt-In Builder vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.5CVE-2026-96330

tagDiv Opt-In Builder <= 1.7.6 - Unauthenticated SQL Injection

Read the full analysis

Vulnerability Records

7 records


2026-10-03 00:00	tagDiv Opt-In Builder <= 1.7.6 - Authenticated (Subscriber+) SQL Injection tagDiv Opt-In Builder <= 1.7.6	`CVE-2026-96329`	6.5 Medium	Rafie Muhammad	Yes
2026-10-03 00:00	tagDiv Opt-In Builder <= 1.7.6 - Unauthenticated SQL Injection tagDiv Opt-In Builder <= 1.7.6	`CVE-2026-96330`	7.5 High	Rafie Muhammad	Yes
2026-07-06 00:00	tagDiv Opt-In Builder <= 1.7.5 - Unauthenticated Stored Cross-Site Scripting tagDiv Opt-In Builder <= 1.7.5	`CVE-2026-57732`	7.2 High	Bonds	Yes
2026-03-16 00:00	tagDiv Opt-In Builder <= 1.7.3 - Reflected Cross-Site Scripting tagDiv Opt-In Builder <= 1.7.3	`CVE-2025-53222`	6.1 Medium	Bonds	Yes
2025-04-29 19:47	tagDiv Opt-In Builder <= 1.7 - Authenticated (Subscriber+) SQL Injection via subscriptionCouponId Parameter tagDiv Opt-In Builder <= 1.7	`CVE-2025-2890`	6.5 Medium	Truoc Phan	Yes
2024-08-16 00:00	tagDiv Opt-In Builder <= 1.4.4 - Authenticated (Admin+) SQL Injection tagDiv Opt-In Builder <= 1.4.4	`CVE-2023-3419`	7.2 High	Truoc Phan	Yes
2024-08-16 00:00	tagDiv Opt-In Builder <= 1.4.4 - Authenticated (Admin+) SQL Injection tagDiv Opt-In Builder <= 1.4.4	`CVE-2023-3416`	7.2 High	Truoc Phan	Yes

Showing 1–7 of 7 reports