Known vulnerabilities in the Td Composer plugin
8 security advisories have been published for the Td Composer plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Td Composer - Cross-Site Scripting (XSS) (CVE-2026-57734) HIGH
- Td Composer - Remote Code Execution (CVE-2026-39712) MEDIUM
- Td Composer - Cross-Site Scripting (XSS) (CVE-2026-39692) MEDIUM
- Td Composer - Cross-Site Scripting (XSS) (CVE-2025-50001) HIGH
- Td Composer - Cross-Site Scripting (XSS) (CVE-2025-50005) MEDIUM
- Td Composer - Cross-Site Scripting (XSS) (CVE-2025-62031) HIGH
- Td Composer - Cross-Site Scripting (XSS) (CVE-2025-62030) MEDIUM
- Td Composer - Cross-Site Scripting (XSS) (CVE-2025-2806) MEDIUM