Stored Cross-Site Scripting Vulnerability in tagDiv Composer Plugin for WordPress
CVE-2025-3510
6.4MEDIUM
What is CVE-2025-3510?
The tagDiv Composer plugin for WordPress suffers from a Stored Cross-Site Scripting vulnerability that arises from inadequate sanitization and escaping of user-supplied attributes in multiple shortcodes. This flaw allows authenticated attackers with contributor-level access or higher to inject malicious web scripts into pages. The injected scripts can execute whenever a user accesses the compromised pages, potentially compromising user data and website integrity.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
tagDiv Composer * <= 5.4