VendorsElegant Themesdiviall versions
Vulnerabilities

Elegant Themes Divi 4.23.2 for WordPress

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

5CVEs
CVE-2020-35945
An issue was discovered in the Divi Builder plugin, Divi theme, and Divi Extra theme before 4.5.3 for WordPress. Authenticated attackers, with contributor-level or above capabilities, can upload arbitrary files, including .php files. This occurs because the check for file extensions is on the client side.
Published 2021-01-01 · Analyzed
9.9EPSS 0.024
CVE-2023-29099
WordPress Divi Theme <= 4.20.2 is vulnerable to Cross Site Scripting (XSS)
Published 2023-08-08 · Modified
6.5EPSS 0.004
CVE-2023-6744
Divi <= 4.23.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Published 2023-12-23 · Modified
6.4EPSS 0.003
CVE-2024-5533
Divi <= 4.25.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published 2024-06-18 · Modified
6.4EPSS 0.003
CVE-2015-1579
Directory traversal vulnerability in the Elegant Themes Divi theme for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the img parameter in a revslider_show_image action to wp-admin/admin-ajax.php. NOTE: this vulnerability may be a duplicate of CVE-2014-9734.
Published 2015-02-11 · Modified
5.02 PoCEPSS 0.209