Elegant Themes Extra Wordpress Theme 4.27.3

version 4.25.2 ( updated 06-12-2024 )
- Security Update: Fixed a stored XSS vulnerability that made it possible for users with Contributor role or above to insert JavaScript code onto the page via the Divi Builder Gallery module's shortcode. Props to Ngô Thiên An (ancorn_) for the responsible disclosure.
- Hide Role Editor settings related to Theme Options, Theme Builder, Theme Customizer, Divi Library, and Support Center for roles without edit_theme_options capability. By default, this changes effected Editor, Author, and Contributor roles, unless they have edit_theme_options capability.
- Fixed a PHP fatal error that occurred in some cases when importing Theme Builder layouts.
- Fixed a PHP notice that occurred during Social Media module Twitter to X migration.
- Fixed a PHP warning (Undefined array key 0).

- Security Update: Fixed a stored XSS vulnerability that could allow users with the Contributor role or above to execute unfiltered HTML via the Divi Countdown module using encoded HTML saved in the WordPress post editor.
- Security Update: Fixed a stored XSS vulnerability that could allow users with the Contributor role or above to execute unfiltered HTML via the Divi Responsive Content script using encoded HTML saved in the WordPress post editor.
- Updated Divi AI page creation card styles to avoid confusion with the Use Existing Page card that shard a similar style.

version 4.25 ( updated 04-18-2024 )
- Introduced Divi Layouts AI: Generate entire Divi pages with a simple prompt using AI.
- Fixed a fatal error that can occur with WordPress 6.5 while using a 3rd-party Divi extension which does not properly set the domain property when extending the DiviExtension base class.