Approved changes feed: RSS · Atom
cpe:2.3:a:elegant_themes:divi:*:*:*:*:*:wordpress:*:*
part: a version: * update: *
| Vendor | Elegant Themes (a8aa8b8c-afb3-5e45-87eb-668af7b22366) |
|---|---|
| Product | Divi (b236cb48-820a-5eb7-a42a-15791fa609f8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/redelivre/wp-divi |
purl2cpe | 2026-06-01 10:13:47.316626 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-29099 |
vulnerable | 2026-06-08 06:02:38.693550 |
WordPress Divi Theme <= 4.20.2 is vulnerable to Cross Site Scripting (XSS)
MEDIUM (6.5)
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Elegant themes Divi theme <= 4.20.2 versions.
Published: 2023-08-08T10:45:48.643Z
Updated: 2026-04-28T16:08:17.387Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-35945 |
vulnerable | 2026-06-08 05:25:02.367288 |
Details available
CRITICAL (9.9)
An issue was discovered in the Divi Builder plugin, Divi theme, and Divi Extra theme before 4.5.3 for WordPress. Authenticated attackers, with contributor-level or above capabilities, can upload arbitrary files, including .php files. This occurs because the check for file extensions is on the client side.
Published: 2021-01-01T03:28:27.000Z
Updated: 2024-08-04T17:16:13.484Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.