Skip to content
OpenAdvisories

Vendor

badhonrocks

5 known vulnerabilities.

Products

Divi Torque Lite – Divi Theme, Divi Builder & Extra Theme 2 Divi Torque Lite – Divi Modules for the Divi Builder & Theme 1 Divi Torque Lite 1 Divi Carousel Free (Divi5 Support) 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.4
    CVE-2024-5647

    Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library

    Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled Magnific Popups library (version 1.1.0) in various versions due to insufficient input sanitization and output escaping on user supplied attributes. This make…

    wpdevteam boldthemes Muffingroup OceanWP
  • Medium 6.4
    CVE-2025-0353

    Divi Torque Lite <= 4.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets

    The Divi Torque Lite – Best Divi Addon, Extensions, Modules & Social Modules plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets in all versions up to, and including, 4.1.0 due to insufficient input sanitization and output es…

    badhonrocks Divi Torque Lite – Divi Theme, Divi Builder & Extra Theme Web / CMS
  • Medium 6.4
    CVE-2025-0350

    Divi Carousel Lite <= 2.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Carousel and Logo Carousel Widgets

    The Divi Carousel Maker – Image, Logo, Testimonial, Post Carousel & More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Carousel and Logo Carousel in all versions up to, and including, 2.0.4 due to insufficient input …

    badhonrocks Divi Carousel Free (Divi5 Support) Web / CMS
  • Medium 6.4
    CVE-2024-5892

    Divi Torque Lite – Divi Theme and Extra Theme <= 3.6.6 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload

    The Divi Torque Lite – Divi Theme and Extra Theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘support_unfiltered_files_upload’ function in all versions up to, and including, 3.6.6 due to insufficient input sanitization and outpu…

    badhonrocks Divi Torque Lite – Divi Theme, Divi Builder & Extra Theme Web / CMS