ACME Divi Modules
ACME Divi Modules has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.
The most common weakness is Missing Authorization, behind 1 of the records (100%).
The one issue recorded for ACME Divi Modules has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by Trương Hữu Phúc (truonghuuphuc). ACME Divi Modules is installed on roughly 400 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 5.2.26.
CVE-2025-31540ACME Divi Modules <= 1.3.5 - Missing Authorization
Read the full analysisVulnerability Records

ACME Divi Modules
Author
acmemediakits
Acme Divi Modules adds some free extra modules and hacks to Elegant Themes Divi Builder Main Features Change Project Slug: Replace default ‘project’ slug with custom slug Extend Page Builder to Custom Post Types: you can now easily extend the Page Builder to any Post Type. Change Divi image sized and ratio Acme Slide in Module *new* This module create an easy slide-in layer inside your website. You can use this module wherever you want inside your page: it will be displayed at the very top of your page. You can place a title, a custom text and a button. Acme Blog Module This module let you change the default sorting and adds a masonry layout Features: Change the Order By default value; Switch between Ascending and Descending sort order; Added masonry.js support, you can choose the number of display columns; Size variation, you can show some item doble sized on a random/selction basis; Acme Portfolio Module This module hacks standard Divi behaviour, letting you use any post type and any taxonomy to display your feed. You can also choose whether to show Excerpt. Features Choose which post_type to display in portfolio; Customize default sort order and order by behaviour; Acme Fullwidth Portfolio Module This module hacks the fullwidth Divi Carousel, letting you use any post type and any taxonomy to display your feed. You can also append the Excerpt and any custom field (strings only). An option let you override default permalink with a custom url (from custom fields). Column number will let you override the standard column number displayed Features Choose which post_type to display in carousel; Customize the number of columns displayed; Customize default sort order and order by behaviour; Display extra custom fields Override default permalink with custom url ACME Media Kits is the home for this plugin. Arbitrary section
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C