badhonrocks
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Divi Torque Lite – Divi Theme, Divi Builder & Extra Theme | 2 | – | Jan 29, 2025 |
| Divi Carousel Free (Divi5 Support) | 1 | – | Jan 25, 2025 |
| Divi Torque Lite | 1 | – | Jul 3, 2025 |
| Divi Torque Lite – Divi Modules for the Divi Builder & Theme | 1 | – | Jul 9, 2026 |
Exploited and recent CVEs
- CVE-2026-4275 Divi Torque Lite <= 4.2.3 - Cross-Site Request Forgery to Arbitrary Plugin Installation via 'install_plugin' REST Endpoint 0.3%
- CVE-2024-5647 Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library 0.4%
- CVE-2025-0353 Divi Torque Lite <= 4.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets 0.4%
- CVE-2025-0350 Divi Carousel Lite <= 2.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Carousel and Logo Carousel Widgets 0.4%
- CVE-2024-5892 Divi Torque Lite – Divi Theme and Extra Theme <= 3.6.6 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload 0.3%