VYPR

Divi Ajax Filter

by WordPress

CVEs (1)

  • CVE-2026-11613CriSep 4, 2026
    risk 0.64cvss 9.8epss 0.01

    The Divi Ajax Filter plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.1.2 via the 'custom_loop_template' parameter parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the…