03303 410 910    hello@blinkweb.co.uk

Client Login

03303 410 910    Client Login

Blink Web Logo White
Urgent Divi Theme Security Update
Security
January 2, 2020

By blinkweb

The developers of the Divi WordPress theme Elegant Themes have released an urgent security patch to fix a recently discovered vulnerability.

The Problem

A code injection vulnerability was discovered by the Elegant Themes team during a routine code audit that could allow logged in contributors, authors and editors to execute a small set of PHP functions.

Are You Affected?

Every website with potentially untrustworthy contributor, author and editor users using Divi version 3.23 and above, Extra 2.23 and above or Divi Builder version 2.23 and above are affected and should update to the latest product versions. Product versions 4.0.10 include the security patch.

How To Fix It

Updating your themes and plugins will fix this problem. You can update your themes and plugins from within your WordPress dashboard. Just click on Appearance and Themes.

Do You Need Support?

We know many of our customers use the Divi theme. If you need a helping hand ensuring this update is applied, just log a support request via your client area.

On Our Managed WordPress Plans?

If you’ve signed up to one of our Managed WordPress plans then fear not. This update has already been applied for you.

Related Posts

Cyber security: Practical reminders from Police event

Cyber security: Practical reminders from Police event

Dec 2, 2025

Cyber security remains one of the most significant risks facing UK organisations and that message came through clearly at the recent Business Focused Cyber Event attended by companies across Hampshire and the Isle of Wight. We joined regional leaders and security...

Hackers Exploiting Outdated WordPress Sites to Distribute Malware

Hackers Exploiting Outdated WordPress Sites to Distribute Malware

Jan 31, 2025

Cybercriminals are taking advantage of outdated WordPress versions and vulnerable plugins to compromise thousands of websites, tricking visitors into downloading and installing malicious software, according to security researchers. The attack campaign is still active,...