CVE-2026-5118

Divi Form Builder ⚠️ ADVERTENCIA: Esta herramienta es solo para pruebas de penetración autorizadas e investigación de seguridad. El acceso no autorizado a sistemas informáticos es ilegal. Úsela solo en sistemas que posea o para los que tenga permiso explícito por escrito para realizar pruebas. Más...

CVE-2026-PoCs

💀 Exploit-Index: The Ultimate CVE Proof of Concept PoC & Exploit Database 150,000+ Verified Exploits & PoCs for Cybersecurity Research All In One Place Explore the Interactive Portal • View the JSON Index • Browse CVEs 📖 About SecureWithUmer/Exploit-Index is the world's premier, zero-API aggregat...

CVE-2026-5118

CVE-2026-5118 — Divi Form Builder ≤ 5.1.2 Escalada de Privilegios No Autenticada mediante Inyección de Rol === Beelze zeroday 1diot9 === 📋 Información de la Vulnerabilidad Campo| Detalles ---|--- CVE ID| CVE-2026-5118 Puntuación CVSS| 9.8 Crítica Vector CVSS|...

CVE-2026-39725

Contributor Remote Code Execution RCE in Content Visibility for Divi Builder = 5.03 versions...

EUVD-2026-93247

Contributor Remote Code Execution RCE in Content Visibility for Divi Builder = 5.03 versions...

CVE-2026-39725 WordPress Content Visibility for Divi Builder plugin <= 5.03 - Remote Code Execution (RCE) vulnerability

Contributor Remote Code Execution RCE in Content Visibility for Divi Builder = 5.03 versions...

CVE-2026-39725

The Content Visibility for Divi Builder plugin for WordPress, versions

Divi Form Builder <=5.1.8 - Unauthenticated Arbitrary File Upload RCE

The Divi Form Builder plugin for WordPress versions 5.1.8 and prior contains an unauthenticated arbitrary file upload vulnerability in the doimageupload AJAX handler. The user-controlled acceptFileTypes POST parameter is injected unsanitized into a PHP regex for file extension validation. By...

CVE-2026-5118

🔥 CVE-2026-5118 Divi Form Builder Un campo oculto. Un valor modificado. Acceso completo a todo el sitio web. 🧨 ¿Qué puede hacer el atacante? Capacidad| Impacto ---|--- 🔑 Crear cuenta de admin sin inicio de sesión| Full Site Takeover 📦 Acceder a datos de clientes de WooCommerce| Data Breach 💉 Edit...

CVE-2026-5118

CVE-2026-5118 CVE-2026-5118-expwordpressDivi Form Builder...

CVE-2026-5524-PoC

CVE-2026-5524 — Divi Form Builder Unauthenticated RCE Mass exploit toolkit for CVE-2026-5524 , an unauthenticated arbitrary file upload vulnerability in the WordPress plugin Divi Form Builder = 5.1.8 leading to remote code execution. Field| Value ---|--- CVE| 2026-5524 CVSS| 9.8 Critical Vector|...

CVE-2026-11613

CVE-2026-11613 — Divi Ajax Filter RCE | ---|--- Plugin| Divi Ajax Filter Divi Engine, premium — no está en el SVN de wordpress.org Afectado| todas las versiones = 5.1.2 el laboratorio usa 3.1.8.4 de un mirror Parcheado| 5.1.3 11/08/2026 Tipo| CWE-98 — Inclusión Local de Archivos PHP, sin...

CVE-2026-19652

The Divi Membership plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 2.2.0. This is due to the dmemformsubmithandler function determining the new user's role by iterating all WordPress roles and calling passwordverify against an attacker-controlled bcry...

CVE-2026-19652 Divi Membership <= 2.2.0 - Unauthenticated Privilege Escalation via 'form_id' Parameter

The Divi Membership plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 2.2.0. This is due to the dmemformsubmithandler function determining the new user's role by iterating all WordPress roles and calling passwordverify against an attacker-controlled bcry...

CVE-2026-19652

The Divi Membership plugin for WordPress (versions up to and including 2.2.0 ) is vulnerable to unauthenticated privilege escalation via the form_id parameter. The root cause lies in the dmem_form_submit_handler() function, which determines a new user's role by iterating through all WordPress rol...

EUVD-2026-91635

The Divi Membership plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 2.2.0. This is due to the dmemformsubmithandler function determining the new user's role by iterating all WordPress roles and calling passwordverify against an attacker-controlled bcry...

WordPress Divi Membership plugin <= 2.2.0 - Unauthenticated Privilege Escalation via 'form_id' Parameter vulnerability

Unauthenticated Privilege Escalation via 'formid' Parameter vulnerability discovered by 0xd4rk5id3 - EnvoraSec in WordPress Plugin Divi Membership versions = 2.2.0...

WordPress Divi Membership plugin <= 2.3.0 - Unauthenticated Authentication Bypass via 'paypal_param' Parameter vulnerability

Unauthenticated Authentication Bypass via 'paypalparam' Parameter vulnerability discovered by 0xd4rk5id3 - EnvoraSec in WordPress Plugin Divi Membership versions = 2.3.0...

CVE-2026-19660

The Divi Membership plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.3.0. The processpaypalcallback function, hooked to the init action, accepts a base64-encoded paypalparam GET parameter with no IPN validation, no cryptographic signature check, ...

CVE-2026-19660

The Divi Membership plugin for WordPress (versions up to and including 2.3.0 ) is vulnerable to an Authentication Bypass via the process_paypal_callback function. This function, hooked to the init action, accepts a base64-encoded paypal_param GET parameter without IPN validation , cryptographic s...