The Plugin “tagDiv Cloud Library” has a security vulnerability

Posted in: Newspaper
Post count: 10
Adroff
#536552
Nov 6, 2025 at 1:20 pm

Hi, I got this message from Wordfence: The Plugin “tagDiv Cloud Library” has a security vulnerability.
Type: Plugin Vulnerable
Issue Found November 3, 2025 4:26 pm
Critical
Current Plugin Version: 3.9.2 | built on 22.10.2025 10:59
Details: To protect your site from this vulnerability, the safest option is to deactivate and completely remove “tagDiv Cloud Library” until a patched version is available.

Do you know anything about it?

Post count: 35449
Calin
#536565
Nov 6, 2025 at 3:58 pm

Hi,
Here are the tools that mention that the fix is in 3.9.2
– https://wpscan.com/vulnerability/0ecaeb97-4f67-4e79-bea8-9c9a6ab7add3/
– https://vdp.patchstack.com/database/wordpress/plugin/td-cloud-library/vulnerability/wordpress-tagdiv-cloud-library-plugin-3-9-cross-site-scripting-xss-vulnerability
– https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/td-cloud-library/tagdiv-cloud-library-39-authenticated-contributor-stored-cross-site-scripting
Another solution is to manually change the plugin version – https://i.imgur.com/2V5Okji.png

Post count: 10
Adroff
#536566
Nov 6, 2025 at 4:03 pm

Thanks for your answer. Does that mean that my version of the plugin (3.9.2) is safe and fixed?

Post count: 35449
Calin
#536569
Nov 6, 2025 at 4:09 pm

Yes, the version of you plugin is safe.
The Wordfence free version receives updates to the plugin software itself, but security updates for firewall rules and malware signatures are delayed by 30 days compared to the Premium version. https://wordpress.org/plugins/wordfence/ – https://i.imgur.com/V5Pqwry.png

Post count: 10
Adroff
#536570
Nov 6, 2025 at 4:12 pm

Wow, that’s crazy. thanks again

Viewing 5 posts - 1 through 5 (of 5 total)
The forum ‘Newspaper’ is closed to new topics and replies.