Extra

Extra

Vulnerabilities:

5

Last Updated:

December 9, 2025

Active Installs:

n/a

Published
Title
Fixed in
CVSS
Published
2024-05-09
Title
Elegant Themes Divi Theme, Extra Theme, Divi Page Builder <= 4.25.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Fixed in
Fixed in 4.25.1
CVSS
6.4 (medium)
Published
2020-08-03
Title
Elegant Themes (Divi 3.0 - 4.5.2, Extra 2.0 - 4.5.2, Divi Builder 2.0 - 4.5.2) - Authenticated Arbitrary File Upload
Fixed in
Fixed in 4.5.3
CVSS
5.4 (medium)
Published
2020-01-02
Title
ElegantThemes (Divi, Extra, divi-builder < 4.0.10) - Authenticated Code Injection
Fixed in
Fixed in 4.0.10
CVSS
4.7 (medium)
Published
2018-10-30
Title
ElegantThemes (Divi, Extra, divi-builder) - Authenticated Stored Cross-Site Scripting (XSS)
Fixed in
Fixed in 2.17.3
CVSS
5.4 (medium)
Published
2016-02-18
Title
ElegantThemes - Privilege Escalation
Fixed in
Fixed in 1.2.4
CVSS
7.6 (high)