Extra

Vulnerabilities 9Slug extraTheme page →

Minimum safe version

4.27.2

Update to 4.27.2 or later to address 7 fixable vulnerabilities

Affected up to4.5.2 ⚠
Medium 6.4
2025-07-03< 4.27.2

Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library

EUVDWordfenceWPScanCVE
Medium 6.4
2024-05-10< 4.25.1

CVE-2024-4490

CVEWPScan
N/A
2018-10-30< 2.17.3

Elegant Themes (Various Versions) - Stored Cross-Site Scripting

Wordfence
N/A
2020-01-04≥ 2.23 and ≤ 4.0.9

Elegant Themes Divi 3.23 - 4.0.9, Divi Extra 2.23 - 4.0.9, Divi Builder 2.23 - 4.0.9 - PHP Code Injection

Wordfence
N/A
< 1.2.4

wpscan.com

WPScan
N/A
2016-02-18< 1.2.4

WordPress Elegant Themes <= 2.6.3 - Privilege Escalation

Patchstack
N/A
2020-01-05< 4.0.10

WordPress Extra premium theme <= 4.0.9 - Authenticated Code Injection vulnerability

Patchstack