divisupreme
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Supreme Modules Lite – Divi Theme, Extra Theme and Divi Builder | 4 | – | Jan 15, 2026 |
Exploited and recent CVEs
- CVE-2025-13062 Supreme Modules Lite <= 2.5.62 - Authenticated (Author+) Arbitrary File Upload via JSON Upload Bypass 0.6%
- CVE-2024-5647 Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library 0.4%
- CVE-2024-5501 Supreme Modules Lite – Divi Theme, Extra Theme and Divi Builder <= 2.5.51 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
- CVE-2024-4334 Supreme Modules Lite – Divi Theme, Extra Theme and Divi Builder <= 2.5.3 - Authenticated (Contributor+) DOM-Based Cross-Site Scripting 0.6%