Vendor

    Elegant Themes

    11 known vulnerabilities in products by Elegant Themes, 0 of them actively exploited (CISA KEV).

    Key figures

    11

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Elegant Themes
    MediumCVE-2026-91707

    Elegant Themes Divi: Missing Authorization

    		5.3
    MediumCVE-2026-3851

    Elegant Themes Divi: Cross-site Scripting

    		6.4
    MediumCVE-2026-3853

    Elegant Themes Divi: Cross-site Scripting

    		6.4
    MediumCVE-2026-3852

    Elegant Themes Divi: Cross-site Scripting

    		6.4
    MediumCVE-2026-3850

    Elegant Themes Divi: Cross-site Scripting

    		6.4
    MediumCVE-2026-4361

    Divi <= 4.27.6 - Authenticated (Contributor+) Server-Side Request Forgery via 'image_src' Parameter

    		5.0
    MediumCVE-2024-4490

    Elegant Themes Divi: Cross-site Scripting

    		6.4
    MediumCVE-2024-5647

    BlossomThemes Social Feed: Cross-site Scripting

    also in 11 other products

    		6.4
    MediumCVE-2023-29099

    WordPress Divi Theme <= 4.20.2 is vulnerable to Cross Site Scripting (XSS)

    also in 1 other product

    		6.5
    MediumCVE-2023-6744

    Divi <= 4.23.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    also in 1 other product

    		6.4
    MediumCVE-2024-5533

    Divi <= 4.25.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

    also in 1 other product

    		6.4

    Products

    Products by Elegant Themes
    Divi110