| CVE-2026-91707 |
The The Divi theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including,…
|
5.3
Medium
|
Sep 18, 2026 |
| CVE-2026-4361 |
The Divi theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.27.6
|
5.0
Medium
|
Sep 5, 2026 |
| CVE-2026-3853 |
The Divi theme for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the `image_src` attribute of the…
|
6.4
Medium
|
Sep 5, 2026 |
| CVE-2026-3852 |
The Divi theme for WordPress is vulnerable to Stored Cross-Site Scripting via the `skype_url` shortcode attribute of the…
|
6.4
Medium
|
Sep 3, 2026 |
| CVE-2026-3850 |
The Divi theme for WordPress is vulnerable to Stored Cross-Site Scripting via the `redirect_url` parameter of the…
|
6.4
Medium
|
Sep 2, 2026 |
| CVE-2026-3851 |
The Divi theme for WordPress is vulnerable to Stored Cross-Site Scripting via the Dynamic Content feature's legacy…
|
6.4
Medium
|
Sep 2, 2026 |
| CVE-2024-5647 |
Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled Magnific Popups…
|
6.4
Medium
|
Jul 3, 2025 |
| CVE-2024-5533 |
The Divi theme for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 4.25.1…
|
6.4
Medium
|
Jun 18, 2024 |
| CVE-2024-4490 |
The Elegant Themes Divi theme, Extra theme, and Divi Page Builder plugin for WordPress are vulnerable to DOM-Based…
|
6.4
Medium
|
May 10, 2024 |
| CVE-2023-6744 |
The Divi theme for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'et_pb_text' shortcode in all…
|
6.4
Medium
|
Dec 23, 2023 |