Divi Essential Divi Plus vulnerabilities

CVE-2026-91136 [HIGH] CWE-22 CVE-2026-91136: The Divi Plus plugin for WordPress is vulnerable to Arbitrary File Read in versions up to, and inclu The Divi Plus plugin for WordPress is vulnerable to Arbitrary File Read in versions up to, and including, 2.4.0 via the 'svg_image' parameter of the /wp-json/elicus/v1/dipl-modules/svg-animator REST endpoint. This is due to the endpoint's permission callback (SVGAnimatorController::index_permission) returning true unconditionally combined with insuffic