VYPR

Divi Ajax Filter

by WordPress

CVEs (1)

  • CVE-2026-11613CriSep 4, 2026
    risk 0.64cvss 9.8epss

    The Divi Ajax Filter plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.1.2 via the 'custom_loop_template' parameter parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the…