{"cvss":0.0,"datePublished":"2020-08-04T00:00:00Z","dateUpdated":"2020-08-04T00:00:00Z","description":"An issue was discovered in the Divi Builder plugin, Divi theme, and Divi Extra theme before 4.5.3 for WordPress. Authenticated attackers, with contributor-level or above capabilities, can upload arbitrary files, including .php files. This occurs because the check for file extensions is on the client side.","dueDate":"","id":"CVE-2020-35945","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"divi","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"elegantthemes divi Unrestricted Upload of File with Dangerous Type","vendor":"elegantthemes"}