elegant-themes

Top products

The 11 most recently published vulnerabilities affecting elegant-themes.

• CVE-2026-91707Divi <= 5.11.1 - Missing Authorization to Unauthenticated Arbitrary Registered Shortcode Execution via 'content' Parameter via Shortcode Module REST Endpoint5.3Sep 18, 2026
• CVE-2026-4361Divi <= 4.27.6 - Authenticated (Contributor+) Server-Side Request Forgery via 'image_src' Parameter5.0Sep 5, 2026
• CVE-2026-3853Divi <= 4.27.6 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Video Slider 'image_src' Shortcode Parameter6.4Sep 5, 2026
• CVE-2026-3852Divi <= 4.27.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Social Media Follow 'skype_url' Shortcode Parameter6.4Sep 3, 2026
• CVE-2026-3850Divi <= 4.27.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Contact Form 'redirect_url' Shortcode Parameter6.4Sep 2, 2026
• CVE-2026-3851Divi <= 4.27.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Dynamic Content (Legacy JSON Format) Shortcode6.4Sep 2, 2026
• CVE-2024-5647Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library6.4Jul 3, 2025
• CVE-2024-5533Divi <= 4.25.1 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4Jun 18, 2024
• CVE-2024-4490Elegant Themes Divi Theme, Extra Theme, Divi Page Builder <= 4.25.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting6.4May 10, 2024
• CVE-2023-6744Divi <= 4.23.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4Dec 23, 2023
• CVE-2023-29099WordPress Divi Theme <= 4.20.2 is vulnerable to Cross Site Scripting (XSS)6.5Aug 8, 2023