Security
فارسی
All products

divi

WordPress · Theme
15 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Divi 5.0 - 5.11.1 - Missing Authorization to Unauthenticated Arbitrary Registered Shortcode Execution via 'content' Parameter via Shortcode Module REST EndpointCVE-2026-91707 divi WordPress Medium Fix reported
Divi 5.0 - 5.8.1 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2026-13712 divi WordPress Medium Fix reported
Divi <= 4.27.6 - Authenticated (Contributor+) Server-Side Request Forgery via 'image_src' ParameterCVE-2026-4361 divi WordPress Medium Fix reported
Divi <= 4.27.6 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Video Slider 'image_src' Shortcode ParameterCVE-2026-3853 divi WordPress Medium Fix reported
Divi <= 4.27.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Social Media Follow 'skype_url' Shortcode ParameterCVE-2026-3852 divi WordPress Medium Fix reported
Divi <= 4.27.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Contact Form 'redirect_url' Shortcode ParameterCVE-2026-3850 divi WordPress Medium Fix reported
Divi <= 4.27.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Dynamic Content (Legacy JSON Format) ShortcodeCVE-2026-3851 divi WordPress Medium Fix reported
Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript LibraryCVE-2024-5647 addons-for-diviblossomthemes-instagram-feed WordPress Medium Fix reported
Divi <= 4.23.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2023-6744 divi WordPress Medium Fix reported
Divi <= 4.25.1 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-5533 divi WordPress Medium Fix reported
Elegant Themes Divi Theme, Extra Theme, Divi Page Builder <= 4.25.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site ScriptingCVE-2024-4490 divi-builderdivi WordPress Medium Fix reported
Divi <= 4.20.2 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2023-29099 divi WordPress Medium Fix reported
Elegant Themes Divi 3.23 - 4.0.9, Divi Extra 2.23 - 4.0.9, Divi Builder 2.23 - 4.0.9 - PHP Code Injection divi-builderdivi WordPress High Fix reported
Elegant Themes (Multiple Versions) - Arbitrary File UploadCVE-2020-35945 divi-builderdivi WordPress High Fix reported
Elegant Themes (Various Versions) - Stored Cross-Site Scripting divi-builderdivi WordPress Medium Fix reported