Search vulnerabilities

Results 2

Export CSV
CVE-2020-35945

An issue was discovered in the Divi Builder plugin, Divi theme, and Divi Extra theme before 4.5.3 for WordPress. Authenticated attackers, with contributor-level or above capabilities, can upload arbitrary files, including .php files. This occurs because the check for file extensions is on the client side.

CVSS 3.1 · 9.9 Critical EPSS 2.5% KEV · Not listed
Vendors
CVE-2016-11002

The Elegant Themes Extra theme before 1.2.4 for WordPress has privilege escalation.

CVSS 3.1 · 8.8 High EPSS 1.9% KEV · Not listed
Vendors
Products