Tagdiv Newspaper
7 CVEs affecting Tagdiv Newspaper. Latest disclosed: 2024-06-15. Critical: 3, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-3477 | Critical | 9.8 | 2022-11-14 | The tagDiv Composer WordPress plugin before 3.5, required by the Newspaper WordPress theme before 12.1 and Newsmag WordPress theme before 5.2.2, does not prope… |
CVE-2016-10972 | Critical | 9.8 | 2019-09-16 | The newspaper theme before 6.7.2 for WordPress has a lack of options access control via td_ajax_update_panel. |
CVE-2017-18634 | Critical | 9.8 | 2019-09-16 | The newspaper theme before 6.7.2 for WordPress has script injection via td_ads[header] to admin-ajax.php. |
CVE-2022-2627 | Medium | 6.1 | 2022-10-31 | The Newspaper WordPress theme before 12 does not sanitise a parameter before outputting it back in an HTML attribute via an AJAX action, leading to a Reflected… |
CVE-2022-2167 | Medium | 6.1 | 2022-10-31 | The Newspaper WordPress theme before 12 does not sanitise a parameter before outputting it back in an HTML attribute via an AJAX action, leading to a Reflected… |
CVE-2021-3135 | Medium | 6.1 | 2021-07-19 | An issue was discovered in the tagDiv Newspaper theme 10.3.9.1 for WordPress. It allows XSS via the wp-admin/admin-ajax.php td_block_id parameter in a td_ajax_… |
CVE-2024-3815 | Medium | 5.5 | 2024-06-15 | The Newspaper theme for WordPress is vulnerable to Stored Cross-Site Scripting via attachment meta in the archive page in all versions up to, and including, 12… |