CVE-2026-96330
CriticalCVSS 9.3Summary
The tagDiv Opt-In Builder plugin (td-subscription) by tagDiv contains an SQL Injection vulnerability (improper neutralization of special elements in SQL commands). It allows an attacker to perform blind SQL injection. This issue affects versions from n/a through 1.7.6.
Risk Assessment
An attacker could execute unauthorized database queries, potentially reading, modifying, or deleting data. This may lead to leakage of sensitive information or full database compromise.
Recommendation
Update the tagDiv Opt-In Builder plugin to a version later than 1.7.6. Check for any unauthorized database access.
Other vulnerabilities in tagDiv Opt-In Builder
See all- CVE-2026-96329High
Blind SQL Injection vulnerability in the tagDiv Opt-In Builder plugin. Affects versions from n/a through 1.7.6.
- CVE-2026-57732High
The tagDiv Opt-In Builder WordPress plugin contains a DOM-Based XSS vulnerability due to improper input neutralization during page generation. The issue affects versions up to and including 1.7.4.
Original NVD description (English source)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in tagDiv tagDiv Opt-In Builder td-subscription allows Blind SQL Injection.This issue affects tagDiv Opt-In Builder: from n/a through 1.7.6.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS