CVE-2020-35945 - CVE House
Back to Database
Status published Critical CVE-2020-35945

An issue was discovered in the Divi Builder plugin, Divi...

Vulnerability Description

An issue was discovered in the Divi Builder plugin, Divi theme, and Divi Extra theme before 4.5.3 for WordPress. Authenticated attackers, with contributor-level or above capabilities, can upload arbitrary files, including .php files. This occurs because the check for file extensions is on the client side.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-35945

Credits & Attribution

No credits recorded in the NVD database.

References

More from elegantthemes

View All →
CVE-2016-11004
The Elegant Themes Monarch plugin before 1.2.7 for WordPress has...
High 8.8
CVE-2016-11003
The Elegant Themes Bloom plugin before 1.1.1 for WordPress has...
High 8.8
CVE-2016-11002
The Elegant Themes Extra theme before 1.2.4 for WordPress has...
High 8.8
CVE-2015-1579
Directory traversal vulnerability in the Elegant Themes Divi theme for...
Medium 5

Affected Vendor

elegantthemes

View all reports →

Affected Software

divi, divi builder, extra
Vulnerable Versions:
3.0, 2.0

Timeline

Official Publish: January 1st, 2021
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:L/S:C/UI:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.