Vendors / Elegant Themes Records 17 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 3
Exploited now Elegant Themes records in CISA KEV No Elegant Themes vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 47
An issue was discovered in the Divi Builder plugin, Divi theme, and Divi Extra theme before 4.5.3 for WordPress.
CVSS 3.1 CRITICAL 9.9· Network · Low privileges · No interaction · EPSS 0.02451 · Published 2021-01-01 · No fix listed CWE-434
Priority MEDIUM 42
Directory traversal vulnerability in the Elegant Themes Divi theme for WordPress allows remote attackers to read arbitrary files via a ..
CVSS 2.0 MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.20895 · Published 2015-02-11 · No fix listed CWE-22
Priority LOW 29
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Elegant themes Divi theme <= 4.20.2 versions.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00387 · Published 2023-08-08 · No fix listed CWE-79
Priority LOW 28
The Divi theme for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 4.25.1 due to insufficient input sanitization and output escaping.
CVSS 3.1 MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00282 · Published 2024-06-18 · No fix listed CWE-20
Priority LOW 28
The Divi theme for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'et_pb_text' shortcode in all versions up to, and including, 4.23.1 due to insufficient input sanitization and output escaping on…
CVSS 3.1 MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00348 · Published 2023-12-23 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
1 3 13 0 0
THREATIST.IORead the docs