Advisories · Technology
divisupreme Supreme Modules Lite – Divi Theme, Extra Theme and Divi Builder.
Every CVE that names divisupreme Supreme Modules Lite – Divi Theme, Extra Theme and Divi Builder among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
Supreme Modules Lite <= 2.5.62 - Authenticated (Author+) Arbitrary File Upload via JSON Upload Bypass
- divisupreme Supreme Modules Lite – Divi Theme, Extra Theme and Divi Builder
- Unrestricted file upload
- CVSS 6.4 Medium
Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library
- BlossomThemes Social Feed
- sayful Carousel Slider
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Supreme Modules Lite – Divi Theme, Extra Theme and Divi Builder <= 2.5.51 - Authenticated (Contributor+) Stored Cross-Site Scripting
- divisupreme Supreme Modules Lite – Divi Theme, Extra Theme and Divi Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Supreme Modules Lite – Divi Theme, Extra Theme and Divi Builder <= 2.5.3 - Authenticated (Contributor+) DOM-Based Cross-Site Scripting
- divisupreme Supreme Modules Lite – Divi Theme, Extra Theme and Divi Builder
- Cross-site scripting (XSS)