CVE-2026-96329: WordPress tagDiv Opt-In Builder plugin <= 1.7.6 - SQL Injection vulnerability

Q: What level of access does an attacker need to exploit this issue?

The CVSS vector indicates that an attacker needs low-level privileges. Exploitation does not require user interaction and can be performed over the network.

Q: What impact could successful exploitation have?

The vulnerability is a blind SQL injection issue with high confidentiality impact, meaning an attacker may be able to extract sensitive database information. The CVSS vector also indicates a low availability impact and that the vulnerability can affect resources beyond the vulnerable component's security scope.

Q: Which plugin versions are affected?

tagDiv Opt-In Builder versions through 1.7.6 are affected. The provided data does not identify an earlier fixed version or a version in which the issue was introduced.

Published Oct 9, 2026

Updated

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in tagDiv tagDiv Opt-In Builder td-subscription allows Blind SQL Injection.This issue affects tagDiv Opt-In Builder: from n/a through 1.7.6.

Affected Software

1 affected component

tagDiv tagDiv Opt-In Builder<=1.7.6

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress tagDiv Opt-In Builder to a version that resolves this vulnerability.
Fixed in 1.7.7

Event History

Oct 9, 2026

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The CVSS vector indicates that an attacker needs low-level privileges. Exploitation does not require user interaction and can be performed over the network.

What impact could successful exploitation have?

The vulnerability is a blind SQL injection issue with high confidentiality impact, meaning an attacker may be able to extract sensitive database information. The CVSS vector also indicates a low availability impact and that the vulnerability can affect resources beyond the vulnerable component's security scope.

Which plugin versions are affected?

tagDiv Opt-In Builder versions through 1.7.6 are affected. The provided data does not identify an earlier fixed version or a version in which the issue was introduced.

CVE-2026-96329: WordPress tagDiv Opt-In Builder plugin <= 1.7.6 - SQL Injection vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What impact could successful exploitation have?

Which plugin versions are affected?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What impact could successful exploitation have?

Which plugin versions are affected?