Unknown Divi vulnerabilities

1 vulnerability

Known vulnerabilities in Unknown Divi, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.4CVE-2026-13712unknowndivi+1
EPSS score
0.23%
The Divi WordPress theme before 5.9.0 does not properly escape some of its Social Media Follow module settings before outputting them in link attributes, allowing users with a role as low as contributor to store JavaScript which will run when a higher privileged user, such as an administrator, views the post.