An issue was discovered in the tagDiv Newspaper theme 10.3.9.1...

6.1 CVSS

Vulnerability Description

An issue was discovered in the tagDiv Newspaper theme 10.3.9.1 for WordPress. It allows XSS via the wp-admin/admin-ajax.php td_block_id parameter in a td_ajax_block API call.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-3135

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from tagdiv

View All →

CVE-2017-18634

The newspaper theme before 6.7.2 for WordPress has script injection...

Critical 9.8

CVE-2016-10972

The newspaper theme before 6.7.2 for WordPress has a lack...

Critical 9.8

Affected Vendor

tagdiv

View all reports →

Affected Software

newspaper

Vulnerable Versions:

10.3.9.1

Timeline

Official Publish: July 19th, 2021

Last Modified: August 3rd, 2024

Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.