CVE-2026-15760

The Divi Essential plugin for WordPress is vulnerable to sensitive information exposure in versions up to, and including, 5.8.1 via the dnxtegetdatabasetables and dnxtegetdatabasedata AJAX actions. The handlers only conditionally verify a nonce the check runs solely when the 'nonce' POST paramete...

CVE-2026-15760

Divi Essential (WordPress plugin) is vulnerable to sensitive information disclosure in versions up to and including 5.8.1 . The root cause lies in the dnxte_get_database_tables and dnxte_get_database_data AJAX handlers, which only conditionally verify a nonce (the check is skipped if the nonce PO...

EUVD-2026-83470

The Divi Essential plugin for WordPress is vulnerable to sensitive information exposure in versions up to, and including, 5.8.1 via the dnxtegetdatabasetables and dnxtegetdatabasedata AJAX actions. The handlers only conditionally verify a nonce the check runs solely when the 'nonce' POST paramete...

PT-2026-95737

Name of the Vulnerable Software and Affected Versions Divi Essential versions prior to 5.8.2 Description The Divi Essential plugin for WordPress allows authenticated attackers with Subscriber-level access and above to expose sensitive information. The issue exists within the dnxte get database...

CVE-2026-15760: Missing Authorization

The Divi Essential plugin for WordPress is vulnerable to sensitive information exposure in versions up to, and including, 5.8.1 via the dnxtegetdatabasetables and dnxtegetdatabasedata AJAX actions. The handlers only conditionally verify a nonce the check runs solely when the 'nonce' POST paramete...