e
elegantthemes
Security Risk Profile
37
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 9 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from February 11, 2015 to present
9
Total CVEs
4
Critical+High
0
Exploited
4
Unpatched
Threat Assessment
Avg CVSS
7.4
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
4
Critical/High
Risk Level
37/100
low
Severity Distribution
Critical
1High
3Medium
5Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
2Age Distribution
Common Weaknesses (CWE)
1
XSS
4
2
Input Validation
1
3
Malicious File Upload
1
4
Path Traversal
1
Most Affected Products
1. Elegantthemes Divi Wordpress5
2. Elegant Themes Divi Wordpress3
3. Elegantthemes Extra Wordpress2
4. Elegantthemes Monarch Wordpress2
5. Elegant Themes Divi Carousel Lite1
Recent Vulnerabilities
See more →CVE-2025-0350
CVSS 6.4medium
Divi Carousel Lite <= 2.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Carousel and Logo Carousel Widgets
Jan 25, 2025
CVE-2024-5533
CVSS 6.4EPSS 0%medium
Divi <= 4.25.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Jun 18, 2024🔧 No Patch
CVE-2023-6744
CVSS 6.4EPSS 0%medium
Divi <= 4.23.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Dec 23, 2023🔧 No Patch
CVE-2023-29099
CVSS 6.5medium
WordPress Divi Theme <= 4.20.2 is vulnerable to Cross Site Scripting (XSS)
Aug 8, 2023
CVE-2020-35945
CVSS 9.9critical
Jan 1, 2021🔧 No Patch
CVE-2016-11004
CVSS 8.8high
Sep 20, 2019🔧 No Patch
CVE-2016-11002
CVSS 8.8high
Sep 20, 2019🔧 No Patch
CVE-2016-11003
CVSS 8.8high
Sep 20, 2019🔧 No Patch
CVE-2015-1579
CVSS 5.0medium
Feb 11, 2015🔧 No Patch
Monitor elegantthemes in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.