CVE Tools
Track your stack

Elegant-themes

6 CVEs tracked since 2026. Since Sep 2026, none of them reached CISA KEV.

Elegant-themes CVEs per month

Sep 2026 to Sep 2026. Point at a month, or focus the strip and use the arrow keys.
Elegant-themes CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2026-0960

Products

The products that kept showing up in Elegant-themes's monthly top three, with their CVEs summed over those months.

  1. Divi61 month

Latest CVEs

The 11 most recently published vulnerabilities affecting Elegant-themes.

  1. CVE-2026-91707Divi <= 5.11.1 - Missing Authorization to Unauthenticated Arbitrary Registered Shortcode Execution via 'content' Parameter via Shortcode Module REST Endpoint5.3
  2. CVE-2026-4361Divi <= 4.27.6 - Authenticated (Contributor+) Server-Side Request Forgery via 'image_src' Parameter5.0
  3. CVE-2026-3853Divi <= 4.27.6 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Video Slider 'image_src' Shortcode Parameter6.4
  4. CVE-2026-3852Divi <= 4.27.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Social Media Follow 'skype_url' Shortcode Parameter6.4
  5. CVE-2026-3850Divi <= 4.27.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Contact Form 'redirect_url' Shortcode Parameter6.4
  6. CVE-2026-3851Divi <= 4.27.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Dynamic Content (Legacy JSON Format) Shortcode6.4
  7. CVE-2024-5647Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library6.4
  8. CVE-2024-5533Divi <= 4.25.1 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4
  9. CVE-2024-4490Elegant Themes Divi Theme, Extra Theme, Divi Page Builder <= 4.25.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting6.4
  10. CVE-2023-6744Divi <= 4.23.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4
  11. CVE-2023-29099WordPress Divi Theme <= 4.20.2 is vulnerable to Cross Site Scripting (XSS)6.5

The record

Peak rank
#182 in Sep 2026
Busiest month shown
Sep 2026, 6 CVEs
Months with a KEV entry
0 since Sep 2026
Monthly snapshots
1 since 2026
Elegant-themes's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store