CVE-2026-57732
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
The tagDiv Opt-In Builder WordPress plugin contains a DOM-Based XSS vulnerability due to improper input neutralization during page generation. The issue affects versions up to and including 1.7.4.
Risk Assessment
An attacker can inject malicious JavaScript that executes in the victim's browser, potentially leading to session theft, redirects, or data theft.
Recommendation
Immediately update the tagDiv Opt-In Builder plugin to the latest available version that fixes this vulnerability.
Other vulnerabilities in tagDiv Opt-In Builder
See all- CVE-2026-96330Critical
The tagDiv Opt-In Builder plugin (td-subscription) by tagDiv contains an SQL Injection vulnerability (improper neutralization of special elements in SQL commands). It allows an attacker to perform blind SQL injection. This issue affects versions from n/a through 1.7.6.
- CVE-2026-96329High
Blind SQL Injection vulnerability in the tagDiv Opt-In Builder plugin. Affects versions from n/a through 1.7.6.
Original NVD description (English source)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv Opt-In Builder td-subscription allows DOM-Based XSS.This issue affects tagDiv Opt-In Builder: from n/a through <= 1.7.4.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS