agentprime: elegant-themes-diviEvery new CVE for elegant-themes-divi.https://agentprime.io/CVE-2026-91707: Divi <= 5.11.1 - Missing Authorization to Unauthenticated Arbitrary Registered Shortcode Execution via 'content' Parameter via Shortcode Module REST Endpointhttps://agentprime.io/advisories/CVE-2026-91707/https://agentprime.io/advisories/CVE-2026-91707/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 06:38:53 GMTCVECVE-2026-4361: Divi <= 4.27.6 - Authenticated (Contributor+) Server-Side Request Forgery via 'image_src' Parameterhttps://agentprime.io/advisories/CVE-2026-4361/https://agentprime.io/advisories/CVE-2026-4361/CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 05 Sep 2026 06:37:59 GMTCVECVE-2026-3853: Divi <= 4.27.6 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Video Slider 'image_src' Shortcode Parameterhttps://agentprime.io/advisories/CVE-2026-3853/https://agentprime.io/advisories/CVE-2026-3853/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 05 Sep 2026 06:37:58 GMTCVECVE-2026-3852: Divi <= 4.27.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Social Media Follow 'skype_url' Shortcode Parameterhttps://agentprime.io/advisories/CVE-2026-3852/https://agentprime.io/advisories/CVE-2026-3852/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 03 Sep 2026 08:28:09 GMTCVECVE-2026-3850: Divi <= 4.27.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Contact Form 'redirect_url' Shortcode Parameterhttps://agentprime.io/advisories/CVE-2026-3850/https://agentprime.io/advisories/CVE-2026-3850/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 02 Sep 2026 06:37:34 GMTCVECVE-2026-3851: Divi <= 4.27.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Dynamic Content (Legacy JSON Format) Shortcodehttps://agentprime.io/advisories/CVE-2026-3851/https://agentprime.io/advisories/CVE-2026-3851/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 02 Sep 2026 03:38:32 GMTCVECVE-2024-5647: Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Libraryhttps://agentprime.io/advisories/CVE-2024-5647/https://agentprime.io/advisories/CVE-2024-5647/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 03 Jul 2025 09:22:19 GMTCVECVE-2024-5533: Divi <= 4.25.1 - Authenticated (Contributor+) Stored Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2024-5533/https://agentprime.io/advisories/CVE-2024-5533/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Jun 2024 07:50:40 GMTCVECVE-2024-4490: Elegant Themes Divi Theme, Extra Theme, Divi Page Builder <= 4.25.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2024-4490/https://agentprime.io/advisories/CVE-2024-4490/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 May 2024 11:03:00 GMTCVECVE-2023-6744: Divi <= 4.23.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodehttps://agentprime.io/advisories/CVE-2023-6744/https://agentprime.io/advisories/CVE-2023-6744/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 23 Dec 2023 09:35:54 GMTCVECVE-2023-29099: WordPress Divi Theme <= 4.20.2 is vulnerable to Cross Site Scripting (XSS)https://agentprime.io/advisories/CVE-2023-29099/https://agentprime.io/advisories/CVE-2023-29099/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Aug 2023 10:45:48 GMTCVE