Skip to content

Elegant Themes vulnerabilities

Products

Newest

elegant themes diviDivi <= 5.11.1 - Missing Authorization to Unauthenticated Arbitrary Registered Shortcode Execution via 'content' Parameter via Shortcode Module REST EndpointCVE-2026-917075.3 MediumSeptember 18, 2026
elegant themes diviDivi <= 4.27.6 - Authenticated (Contributor+) Server-Side Request Forgery via 'image_src' ParameterCVE-2026-43615.0 MediumSeptember 5, 2026
elegant themes diviDivi <= 4.27.6 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Video Slider 'image_src' Shortcode ParameterCVE-2026-38536.4 MediumSeptember 5, 2026
elegant themes diviDivi <= 4.27.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Social Media Follow 'skype_url' Shortcode ParameterCVE-2026-38526.4 MediumSeptember 3, 2026
elegant themes diviDivi <= 4.27.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Contact Form 'redirect_url' Shortcode ParameterCVE-2026-38506.4 MediumSeptember 2, 2026
elegant themes diviDivi <= 4.27.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Dynamic Content (Legacy JSON Format) ShortcodeCVE-2026-38516.4 MediumSeptember 2, 2026
elegant themes diviDivi 5.0 - 5.8.1 - Contributor+ Stored XSS via Social Media Follow Skype URLCVE-2026-137125.4 MediumAugust 16, 2026
badhonrocks divi torque lite, blossomthemes social feed, boldthemes bold page builder +12 more +14 moreMultiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript LibraryCVE-2024-56476.4 MediumJuly 3, 2025
elegant themes diviDivi <= 4.25.1 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-55336.4 MediumJune 18, 2024
elegant themes divi, divi builder, divi extra +2 moreElegant Themes Divi Theme, Extra Theme, Divi Page Builder <= 4.25.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site ScriptingCVE-2024-44906.4 MediumMay 10, 2024
elegant themes diviDivi <= 4.23.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2023-67446.4 MediumDecember 23, 2023
elegant themes diviWordPress Divi Theme <= 4.20.2 is vulnerable to Cross Site Scripting (XSS)CVE-2023-290996.5 MediumAugust 8, 2023