2 security vulnerabilities in tagDiv Composer versions <= 5.4.3

Posted in: Newsmag
Post count: 5
kinisis
#541398
Apr 9, 2026 at 11:34 am

Hello. There are two security vulnerabilities in tagDiv Composer versions <= 5.4.3

1) https://patchstack.com/database/wordpress/plugin/td-composer/vulnerability/wordpress-tagdiv-composer-plugin-5-4-3-arbitrary-shortcode-execution-vulnerability

2) https://patchstack.com/database/wordpress/plugin/td-composer/vulnerability/wordpress-tagdiv-composer-plugin-5-4-3-cross-site-scripting-xss-vulnerability

When will these security vulnerabilities be fixed?

Thank you
George

Post count: 35449
Calin
#541401
Apr 9, 2026 at 12:42 pm

Hi,
Our developers have been informed about this issue, and it will be addressed in an upcoming theme update. We expect the fix to be released by the end of this month.
Thank you for your understanding!

Post count: 115
Jens H.
#541854
May 4, 2026 at 7:34 pm

We’re now in May and still no update. When to expect?

Post count: 35449
Calin
#541860
May 5, 2026 at 8:48 am

Hello,
Our developers have already prepared a package for Newsmag; however, in the meantime, a vulnerability was identified in Newspaper, which has been prioritized.
An update for Newspaper will be released in the coming days, after which we will verify whether this vulnerability also affects Newsmag. If not, we will proceed with releasing the existing package.
Thank you for your understanding.

Viewing 4 posts - 1 through 4 (of 4 total)
You must be logged in to reply to this topic.