Divi Torque Lite – Divi Modules for the Divi Builder & Theme

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Divi Torque Lite – Divi Modules for the Divi Builder & Theme

Information

Software Type Plugin
Software Slug addons-for-divi (view on wordpress.org)
Software Status Active
Software Author badhonrocks
Software Website divitorque.com
Software Downloads 918,158
Software Active Installs 50,000
Software Record Last Updated July 21, 2026

5 Vulnerabilities

Submit a Vulnerability
Divi Torque Lite <= 4.2.3 - Cross-Site Request Forgery to Arbitrary Plugin Installation via 'install_plugin' REST Endpoint
8.8
CVE-2026-4275
Jul 8, 2026
Researcher: wesley (wcraft)
Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library
6.4
CVE-2024-5647
Jul 2, 2025
Researcher: Webbernaut
Divi Torque Lite <= 4.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
6.4
CVE-2025-0353
Jan 28, 2025
Researcher: Webbernaut
Divi Torque Lite – Divi Theme and Extra Theme <= 3.6.6 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload
6.4
CVE-2024-5892
Jun 11, 2024
Researcher: wesley (wcraft)
Freemius SDK <= 2.4.2 - Missing Authorization Checks
6.3
CVE-2022-4974
Mar 4, 2022
Researchers:
Title Status CVE ID CVSS Researchers Date
Divi Torque Lite <= 4.2.3 - Cross-Site Request Forgery to Arbitrary Plugin Installation via 'install_plugin' REST Endpoint Patched CVE-2026-4275 8.8 wesley (wcraft) July 8, 2026
Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library Patched CVE-2024-5647 6.4 Webbernaut July 2, 2025
Divi Torque Lite <= 4.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets Patched CVE-2025-0353 6.4 Webbernaut January 28, 2025
Divi Torque Lite – Divi Theme and Extra Theme <= 3.6.6 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload Patched CVE-2024-5892 6.4 wesley (wcraft) June 11, 2024
Freemius SDK <= 2.4.2 - Missing Authorization Checks Patched CVE-2022-4974 6.3 March 4, 2022

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation