Vulnerability Details for tagDiv Cloud Library

Posted in: Newspaper
Post count: 1
dragold
#536521
Nov 5, 2025 at 6:10 pm

Hello,

Today, Wordfence issued a critical security alert for the tagDiv Cloud Library plugin. I’m trying to update the theme, but it won’t let me and says it’s already up to date. Can you tell me when you plan to fix this vulnerability?

I’ve included a link to the Wordfence website with the alert and explanation of the issue.

https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/td-cloud-library/tagdiv-cloud-library-39-authenticated-contributor-stored-cross-site-scripting

  • This topic was modified 9 months by dragold.
Post count: 35449
Calin
#536535
Nov 6, 2025 at 8:48 am

Hi,
Here are the tools that mention that the fix is in 3.9.2
– https://wpscan.com/vulnerability/0ecaeb97-4f67-4e79-bea8-9c9a6ab7add3/
– https://vdp.patchstack.com/database/wordpress/plugin/td-cloud-library/vulnerability/wordpress-tagdiv-cloud-library-plugin-3-9-cross-site-scripting-xss-vulnerability
– https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/td-cloud-library/tagdiv-cloud-library-39-authenticated-contributor-stored-cross-site-scripting
Another solution is to manually change the plugin version – https://i.imgur.com/2V5Okji.png

Viewing 2 posts - 1 through 2 (of 2 total)
The forum ‘Newspaper’ is closed to new topics and replies.