Vendor

Elicus

1 brief RSS

Arbitrary File Read Vulnerability in Divi Plus Plugin

The Divi Plus WordPress plugin contains an arbitrary file read vulnerability (CVE-2026-91136) in the SVG animator REST endpoint that allows unauthenticated attackers to exfiltrate sensitive server files.

Divi Plus wordpress vulnerability web-application

1r 2t 1c 7m ago