Vulnerabilities in Elegant Themes

11 results
Vexday analysis

A Elegant Themes possui 4 vulnerabilidades registradas na base, todas de severidade baixa a média, com nenhuma sob exploração ativa confirmada. A fraqueza dominante é injeção de script (CWE-79), típica em plataformas web, mas sem incidentes críticos recentes que demandem ação imediata.

CVE-2024-4490MEDIUMElegant Themes Divi Theme, Extra Theme, Divi Page Builder <= 4.25.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site ScriptingEPSS 0.5%CVE-2026-91707MEDIUMDivi <= 5.11.1 - Missing Authorization to Unauthenticated Arbitrary Registered Shortcode Execution via 'content' Parameter via Shortcode Module REST EndpointEPSS 0.5%CVE-2023-29099MEDIUMWordPress Divi Theme <= 4.20.2 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2026-4361MEDIUMDivi <= 4.27.6 - Authenticated (Contributor+) Server-Side Request Forgery via 'image_src' ParameterEPSS 0.4%CVE-2024-5647MEDIUMMultiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript LibraryEPSS 0.3%CVE-2023-6744MEDIUMDivi <= 4.23.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeEPSS 0.3%CVE-2026-3851MEDIUMDivi <= 4.27.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Dynamic Content (Legacy JSON Format) ShortcodeEPSS 0.3%CVE-2024-5533MEDIUMDivi <= 4.25.1 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2026-3852MEDIUMDivi <= 4.27.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Social Media Follow 'skype_url' Shortcode ParameterEPSS 0.3%CVE-2026-3853MEDIUMDivi <= 4.27.6 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Video Slider 'image_src' Shortcode ParameterEPSS 0.3%CVE-2026-3850MEDIUMDivi <= 4.27.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Contact Form 'redirect_url' Shortcode ParameterEPSS 0.3%