Divi Essential has 2 CVEs on record. 2 were published in the last 90 days. The median CVSS is 7.0 (high).

CVEs per month

Last 12 months, by publish date

1125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/10

Exploited share: 0% vs 1% corpus
Median CVSS: 7.0
Publish → KEV: —
Last 90 days: 2 prev 0

Weakness classes

Products

Divi Essentials 1
Divi Plus 1

Follow Divi Essential:RSS feed Save a search →Embed badge ↗

Total CVEs

Critical

CISA KEV

Exploited

Worst active — by depth score

Divi Essential vulnerabilities

CVEs affecting Divi Essential, newest first. Open any entry for full detail, references, and exploit status.

2 CVEsRSS

CVE-2026-91136High· 7.5PoC

3w ago

The Divi Plus plugin for WordPress is vulnerable to Arbitrary File Read in versions up to, and including, 2.4.0 via the 'svg_image' parameter of the /wp-json/elicus/v1/dipl-modules/svg-animator REST endpoint

The Divi Plus plugin for WordPress is vulnerable to Arbitrary File Read in versions up to, and including, 2.4.0 via the 'svg_image' parameter of the /wp-json/elicus/v1/dipl-modules/svg-animator REST endpoint. This is due to the endpoint'…

▾ MidnightDivi Essential · Divi PlusEPSS 2.9%via NVD

CVE-2026-15760Medium· 6.5

1mo ago

The Divi Essential plugin for WordPress is vulnerable to sensitive information exposure in versions up to, and including, 5.8.1 via the dnxte_get_database_tables and dnxte_get_database_data AJAX actions

The Divi Essential plugin for WordPress is vulnerable to sensitive information exposure in versions up to, and including, 5.8.1 via the dnxte_get_database_tables and dnxte_get_database_data AJAX actions. The handlers only conditionally …

▾ SunlitDivi Essential · Divi EssentialsEPSS 0.38%via NVD