tagDiv Composer Plugin <= 5.4.2 is vulnerable to Cross Site Scripting

Posted in: Newsmag
Post count: 5
kinisis
#539253
Jan 23, 2026 at 9:41 am

Hi. New from patchstack.com

https://patchstack.com/database/wordpress/plugin/td-composer/vulnerability/wordpress-tagdiv-composer-plugin-5-4-2-cross-site-scripting-xss-vulnerability

We are waiting the fix.
Thanks in advance.
George

Post count: 35449
Calin
#539278
Jan 23, 2026 at 2:26 pm

Hi,
There will soon be a theme update to fix the XSS vulnerability on the Newsmag theme.

Post count: 113
David Henry
#539311
Jan 25, 2026 at 2:06 pm

can we download 5.4.3?
d

Post count: 35449
Calin
#539321
Jan 26, 2026 at 10:27 am

Hi David Henry,
The update was not yet released, but will be this week.
Thank you!

Viewing 4 posts - 1 through 4 (of 4 total)
You must be logged in to reply to this topic.