https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-5533.htmlhttps://patchthecve.com/cve/CVE-2024-5533.htmlWed, 17 Jun 2026 08:16:08 +0000MEDIUM 6.4: The Divi theme for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 4.25.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts ihttps://patchthecve.com/cve/CVE-2023-6744.htmlhttps://patchthecve.com/cve/CVE-2023-6744.htmlWed, 17 Jun 2026 06:51:20 +0000MEDIUM 6.4: The Divi theme for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'et_pb_text' shortcode in all versions up to, and including, 4.23.1 due to insufficient input sanitization and output escaping on user supplied custom field data. This makes it possible for authenticated attachttps://patchthecve.com/cve/CVE-2023-29099.htmlhttps://patchthecve.com/cve/CVE-2023-29099.htmlWed, 17 Jun 2026 05:49:21 +0000MEDIUM 6.5: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Elegant themes Divi theme <= 4.20.2 versions.https://patchthecve.com/cve/CVE-2020-35945.htmlhttps://patchthecve.com/cve/CVE-2020-35945.htmlWed, 17 Jun 2026 03:14:39 +0000CRITICAL 9.9: An issue was discovered in the Divi Builder plugin, Divi theme, and Divi Extra theme before 4.5.3 for WordPress. Authenticated attackers, with contributor-level or above capabilities, can upload arbitrary files, including .php files. This occurs because the check for file extensions is on the clienthttps://patchthecve.com/cve/CVE-2018-19162.htmlhttps://patchthecve.com/cve/CVE-2018-19162.htmlWed, 17 Jun 2026 01:48:53 +0000HIGH 7.5: Divi through 4.0.5 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acquires even a small amount of stake/coins in the system. The attacker sends invalid headers/blocks, which are stored on the victim's disk.