CVE-2026-96329
HighCVSS 8.5Summary
Blind SQL Injection vulnerability in the tagDiv Opt-In Builder plugin. Affects versions from n/a through 1.7.6.
Risk Assessment
An attacker can execute database queries, potentially leading to data leakage or modification.
Recommendation
Update the tagDiv Opt-In Builder plugin to the latest available version that includes the security fix.
Other vulnerabilities in tagDiv Opt-In Builder
See all- CVE-2026-96330Critical
The tagDiv Opt-In Builder plugin (td-subscription) by tagDiv contains an SQL Injection vulnerability (improper neutralization of special elements in SQL commands). It allows an attacker to perform blind SQL injection. This issue affects versions from n/a through 1.7.6.
- CVE-2026-57732High
The tagDiv Opt-In Builder WordPress plugin contains a DOM-Based XSS vulnerability due to improper input neutralization during page generation. The issue affects versions up to and including 1.7.4.
Original NVD description (English source)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in tagDiv tagDiv Opt-In Builder td-subscription allows Blind SQL Injection.This issue affects tagDiv Opt-In Builder: from n/a through 1.7.6.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS