CVE-2026-57733

HighCVSS 7.1

Published: 13/07/2026(UTC)Updated: 24/10/2026(UTC)Translated: 14/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.25%

16th percentile - higher than 16% of all known CVEs

Summary

The tagDiv Cloud Library (td-cloud-library) plugin for WordPress contains a DOM-based Cross-Site Scripting (XSS) vulnerability. The issue arises from improper neutralization of input during web page generation.

Risk Assessment

An attacker can inject a malicious client-side script, potentially leading to user session theft, redirects to malicious sites, or theft of sensitive data.

Recommendation

Immediately update the tagDiv Cloud Library plugin to a version newer than 3.9.4, which includes a fix for this vulnerability.

Other vulnerabilities in tagDiv Cloud Library

CVE-2025-62032Medium
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv Cloud Library td-cloud-library allows DOM-Based XSS.This issue affects tagDiv Cloud Library: from n/a through < 3.9.2.

Original NVD description (English source)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv Cloud Library td-cloud-library allows DOM-Based XSS.This issue affects tagDiv Cloud Library: from n/a through <= 3.9.4.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS