These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
The Divi theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.11.1. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. The vulnerability allows unauthenticated attackers to execute unint [truncated]
The Divi theme for WordPress is vulnerable to Server-Side Request Forgery (SSRF) in all versions up to, and including, 4.27.6. This vulnerability allows authenticated attackers with Contributor-level access and above to make web requests to arbitrary locations originating from the web application server. Although the response body is not returned to the attacker (blind SSRF), two oracles exist: a status o [truncated]
The Divi theme for WordPress has a DOM-Based Stored Cross-Site Scripting vulnerability via the `image_src` attribute of the `et_pb_video_slider_item` shortcode in all versions up to, and including, 4.27.6. This vulnerability allows authenticated attackers with Contributor-level access and above to inject arbitrary web scripts in pages that will execute whenever a user hovers over the carousel thumbnail. T [truncated]
The Divi theme for WordPress is vulnerable to Stored Cross-Site Scripting via the `skype_url` shortcode attribute of the Social Media Follow module in all versions up to, and including, 4.27.6. This is due to a three-part sanitization failure: (1) the `skype_url` field is not included in the `$url_options` whitelist in `class-et-builder-element.php`, so it never invokes `esc_url_raw()` during shortcode pr [truncated]
The Divi theme for WordPress has a Stored Cross-Site Scripting vulnerability via the `redirect_url` parameter of the `et_pb_contact_form` shortcode. This issue allows authenticated attackers with Contributor-level access and above to inject arbitrary web scripts, potentially leading to security breaches and data exposure. The vulnerability exists due to improper sanitization of the `redirect_url` attribut [truncated]
The Divi theme for WordPress, specifically versions up to and including 4.27.6, is vulnerable to Stored Cross-Site Scripting (XSS) attacks through its Dynamic Content feature's legacy JSON format. This vulnerability arises from two primary issues: (1) the save-time sanitization filter `et_builder_sanitize_dynamic_content_fields()` only checks for dynamic content markers in the `@ET-DC@...@` format, but th [truncated]
