Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in Divi themes and plugin

  • Severity: medium-risk
  • Status: Fixed
  • Publication: October 30, 2018

The Elegant Themes Divi Builder plugin and certain themes, including Divi and Extra, were found to have a security vulnerability in versions up to and including 2.17.2. This vulnerability means that malicious users can insert malicious web scripts into pages which will run when any user accesses the page. This is due to a lack of proper input sanitization and output escaping in the post builder.

Detected in:

Divi fixed vulnerable versions: >= * <= 3.17.2
Divi Builder fixed vulnerable versions: >= * <= 2.17.2
Divi Extra fixed vulnerable versions: >= * <= 2.17.2

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.