Divi Essential vulnerabilities
We track 1 vulnerability in Divi Essential products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 10, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Divi Essential vulnerabilities
- 7.5 High severity
Divi Plus: Improper Limitation of a Pathname to a Restricted Directory
The Divi Plus plugin for WordPress is vulnerable to Arbitrary File Read in versions up to, and including, 2.4.0 via the 'svg_image' parameter of the /wp-json/elicus/v1/dipl-modules/svg-animator REST endpoint. This is due to the endpoint's permission callback (