ET
Vendor
Elegant Themes
14
CVEs
0
On KEV
0
New 30D
Products
DI6.4
Divi
Elegant Themes
10 CVEs0 on KEV0 new
DB6.4
Divi Builder
Elegant Themes
2 CVEs0 on KEV0 new
DE6.4
Divi Extra
Elegant Themes
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-91707 | DI Divi Elegant Themes | 5.3 | Sep 18 | Divi <= 5.11.1 - Missing Authorization to Unauthenticated Arbitrary Registered Shortcode Execution via 'content' Parameter via Shortcode Module REST Endpoint |
| CVE-2026-4361 | DI Divi Elegant Themes | 5.0 | Sep 5 | Divi <= 4.27.6 - Authenticated (Contributor+) Server-Side Request Forgery via 'image_src' Parameter |
| CVE-2026-3853 | DI Divi Elegant Themes | 6.4 | Sep 5 | Divi <= 4.27.6 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Video Slider 'image_src' Shortcode Parameter |
| CVE-2026-3852 | DI Divi Elegant Themes | 6.4 | Sep 3 | Divi <= 4.27.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Social Media Follow 'skype_url' Shortcode Parameter |
| CVE-2026-3850 | DI Divi Elegant Themes | 6.4 | Sep 2 | Divi <= 4.27.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Contact Form 'redirect_url' Shortcode Parameter |
| CVE-2026-3851 | DI Divi Elegant Themes | 6.4 | Sep 2 | Divi <= 4.27.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Dynamic Content (Legacy JSON Format) Shortcode |
| CVE-2024-5647 | DI Divi Elegant Themes | 6.4 | Jul 3 | Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library |
| CVE-2024-5533 | DI Divi Elegant Themes | 5.4 | Jun 18 | Divi <= 4.25.1 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-4490 | DE Divi Extra Elegant Themes | 6.4 | May 10 | Elegant Themes Divi Theme, Extra Theme, Divi Page Builder <= 4.25.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting |
| CVE-2023-6744 | DI Divi Elegant Themes | 5.4 | Dec 23 | Divi <= 4.23.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode |