At CourseVector, our managed hosting team is dedicated to monitoring and resolving issues to keep our clients’ websites running smoothly and securely. Recently, we addressed a security vulnerability (CVE-2024-4334) in the Supreme Modules Lite plugin for WordPress.

The Supreme Modules Lite – Divi Theme, Extra Theme and Divi Builder plugin for WordPress is vulnerable to DOM-Based Cross-Site Scripting via the ‘typing_cursor’ parameter in versions up to, and including, 2.5.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

By addressing such vulnerabilities, we safeguard our clients’ websites from potential threats. To ensure your site receives this level of vigilant protection, consider exploring our Managed WordPress hosting services.