WordPress Plugin Divi Builder PHP Code Injection (4.0.9)

Description

WordPress Plugin Divi Builder is prone to a vulnerability that lets attackers inject and execute arbitrary code because the application fails to sanitize user-supplied input. Attackers can exploit this issue to execute arbitrary PHP code within the context of the affected webserver process. WordPress Plugin Divi Builder version 4.0.9 is vulnerable; prior versions may also be affected.

Remediation

Update to plugin version 4.0.10 or latest

References

Related Vulnerabilities

Severity

Classification

Tags