Divi Essential
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Divi Essentials | 1 | – | Sep 19, 2026 |
| Divi Plus | 1 | – | Oct 10, 2026 |
Exploited and recent CVEs
- CVE-2026-91136 Divi Plus <= 2.4.0 - Unauthenticated Arbitrary File Read via 'svg_image' Parameter 2.9%
- CVE-2026-15760 Divi Essentials <= 5.8.1 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via dnxte_get_database_data AJAX Action 0.4%