badhonrocks vulnerabilities

CVEs per yearBy the year they were published

1. 20242
2. 20253
3. 20261

Newest CVEs

• CVE-2026-4275

  Divi Torque Lite <= 4.2.3 - Cross-Site Request Forgery to Arbitrary Plugin Installation via 'install_plugin' REST Endpoint

  badhonrocks · Divi Torque Lite – Divi Modules for the Divi Builder & Theme

  High8.8
• CVE-2024-5647

  Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library

  blossomthemes · BlossomThemes Social Feed

  Medium6.4
• CVE-2025-0353

  Divi Torque Lite <= 4.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets

  badhonrocks · Divi Torque Lite – Divi Theme, Divi Builder & Extra Theme

  Medium6.4
• CVE-2025-0350

  Divi Carousel Lite <= 2.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Carousel and Logo Carousel Widgets

  badhonrocks · Divi Carousel Free (Divi5 Support)

  Medium6.4
• CVE-2022-4974

  Freemius SDK <= 2.4.2 - Missing Authorization Checks

  dashlabsltd · YASR – Yet Another Star Rating Plugin for WordPress

  Medium6.3
• CVE-2024-5892

  Divi Torque Lite – Divi Theme and Extra Theme <= 3.6.6 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload

  badhonrocks · Divi Torque Lite – Divi Theme, Divi Builder & Extra Theme

  Medium6.4