PLUGIN SECURITY
Is Addons For Divi safe?
41 free Divi 5 modules and Divi extensions: image carousel, logo carousel, accordion, tabs, modal popup, video popup, FAQ, and more.
What this plugin does
- Slug:
addons-for-divi - Author: Fahim Reza
- 50000+ active installs
- 94/100 rating (116 reviews on wordpress.org)
- 1110518 all-time downloads
- On WordPress.org since 2020-10-29
dividivi 5divi builderdivi carouselDivi Modules
Maintenance status
- Last updated: 2026-10-03 2:32am GMT
- Tested up to WordPress: 7.1.3
- Requires PHP: 7.4+
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
4 known CVEs on file for Addons For Divi.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2024-5647 | Divi Torque Lite [addons-for-divi] < 4.0.6 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.4 | < 4.0.6 | 4.0.6 | 2025-07-02 | — |
| CVE-2026-4275 | Divi Torque Lite [addons-for-divi] < 4.3.0 | Cross-Site Request Forgery (CSRF) | High 8.8 | < 4.3.0 | 4.3.0 | 2025-07-02 | — |
| CVE-2024-5892 | Divi Torque Lite [addons-for-divi] < 4.0.0 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.4 | < 4.0.0 | 4.0.0 | 2024-06-11 | — |
| CVE-2023-33999 | Divi Torque Lite [addons-for-divi] < 3.6.0 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | High 7.1 | < 3.6.0 | 3.6.0 | 2023-07-18 | — |
| — | Divi Torque Lite [addons-for-divi] < 3.5.0 | Missing Authorization | Medium 6.3 | < 3.5.0 | 3.5.0 | 2022-03-04 | — |
| — | Divi Torque Lite [addons-for-divi] < 3.5.0 | — | Unknown | < 3.5.0 | 3.5.0 | 2022-02-28 | — |
| — | Divi Torque Lite [addons-for-divi] < 3.5.0 | — | Unknown | < 3.5.0 | 3.5.0 | 2022-02-28 | — |
| — | Divi Torque Lite [addons-for-divi] < 4.1.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.4 | < 4.1.1 | 4.1.1 | 0000-00-00 | — |
How to fix it
Update this plugin to the latest release from wordpress.org — each CVE above lists the exact release that fixed it ("Fixed in") when one is on file.
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- Supreme Modules Lite – Divi Theme, Extra Theme and Divi Builder — 200000+ active installs — 96/100 (108) — max PHP 8.4
- Popups for Divi — 100000+ active installs — 96/100 (442) — max PHP 8.4
- Divi Carousel Lite – Make Carousels for Divi 5 — 30000+ active installs — 96/100 (146) — max PHP 8.4
- Breadcrumbs Divi Module — 10000+ active installs — 90/100 (14) — max PHP 8.4
- Simple Divi Shortcode — 10000+ active installs — 100/100 (23)
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.