CVE-2026-PoCs

💀 Exploit-Index: The Ultimate CVE Proof of Concept PoC & Exploit Database 150,000+ Verified Exploits & PoCs for Cybersecurity Research All In One Place Explore the Interactive Portal • View the JSON Index • Browse CVEs 📖 About SecureWithUmer/Exploit-Index is the world's premier, zero-API aggregat...

Divi Form Builder <=5.1.8 - Unauthenticated Arbitrary File Upload RCE

The Divi Form Builder plugin for WordPress versions 5.1.8 and prior contains an unauthenticated arbitrary file upload vulnerability in the doimageupload AJAX handler. The user-controlled acceptFileTypes POST parameter is injected unsanitized into a PHP regex for file extension validation. By...

CVE-2026-5118

⚡ CVE-2026-5118 Divi Form Builder — Повышение привилегий без аутентификации "Security Research" • "Defensive Detection" • "Vulnerability Research" --- 🔥 Обзор CVE-2026-5118 — это уязвимость повышения привилегий без аутентификации, затрагивающая Divi Form Builder версий до 5.1.2 включительно...

CVE-2026-5118

Divi Form Builder ⚠️ ПРЕДУПРЕЖДЕНИЕ: Этот инструмент предназначен только для авторизованного тестирования на проникновение и исследований безопасности. Несанкционированный доступ к компьютерным системам незаконен. Используйте только на системах, которыми вы владеете или на тестирование которых...

CVE-2026-5118

CVE-2026-5118 — Divi Form Builder ≤ 5.1.2 Élévation de privilèges non authentifiée par injection de rôle === Beelze zeroday 1diot9 === 📋 Informations sur la vulnérabilité Champ| Détails ---|--- ID CVE| CVE-2026-5118 Score CVSS| 9.8 Critique Vecteur CVSS| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A...

CVE-2026-39725

Contributor Remote Code Execution RCE in Content Visibility for Divi Builder = 5.03 versions...

EUVD-2026-93247

Contributor Remote Code Execution RCE in Content Visibility for Divi Builder = 5.03 versions...

CVE-2026-39725 WordPress Content Visibility for Divi Builder plugin <= 5.03 - Remote Code Execution (RCE) vulnerability

Contributor Remote Code Execution RCE in Content Visibility for Divi Builder = 5.03 versions...

CVE-2026-39725

The Content Visibility for Divi Builder plugin for WordPress, versions

CVE-2026-5118

🔥 CVE-2026-5118 Divi Form Builder Одно скрытое поле. Одно изменённое значение. Полный доступ ко всему сайту. 🧨 Что может сделать злоумышленник? Возможность| Последствие ---|--- 🔑 Создать учётную запись администратора без входа в систему| Полный захват сайта 📦 Доступ к данным клиентов WooCommerce|...

CVE-2026-5118

CVE-2026-5118 CVE-2026-5118-expwordpressDivi Form Builder...

CVE-2026-5524-PoC

CVE-2026-5524 — Неаутентифицированный RCE в Divi Form Builder Массовый эксплойт-тулкит для CVE-2026-5524 — уязвимости неаутентифицированной загрузки произвольных файлов в WordPress-плагине Divi Form Builder = 5.1.8, приводящей к удалённому выполнению кода. Поле| Значение ---|--- CVE| 2026-5524...

CVE-2026-11613

CVE-2026-11613 — Divi Ajax Filter RCE | ---|--- Плагин| Divi Ajax Filter Divi Engine, премиум — не в wordpress.org SVN Затронуты| все версии = 5.1.2 в лаборатории использовалась 3.1.8.4 из зеркала Исправлено| 5.1.3 11/08/2026 Тип| CWE-98 — PHP Local File Inclusion, неаутентифицированный CVSS| 9.8...

CVE-2026-19652

The Divi Membership plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 2.2.0. This is due to the dmemformsubmithandler function determining the new user's role by iterating all WordPress roles and calling passwordverify against an attacker-controlled bcry...

CVE-2026-19652

The Divi Membership plugin for WordPress (versions up to and including 2.2.0 ) is vulnerable to unauthenticated privilege escalation via the form_id parameter. The root cause lies in the dmem_form_submit_handler() function, which determines a new user's role by iterating through all WordPress rol...

CVE-2026-19652 Divi Membership <= 2.2.0 - Unauthenticated Privilege Escalation via 'form_id' Parameter

The Divi Membership plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 2.2.0. This is due to the dmemformsubmithandler function determining the new user's role by iterating all WordPress roles and calling passwordverify against an attacker-controlled bcry...

EUVD-2026-91635

The Divi Membership plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 2.2.0. This is due to the dmemformsubmithandler function determining the new user's role by iterating all WordPress roles and calling passwordverify against an attacker-controlled bcry...

WordPress Divi Membership plugin <= 2.2.0 - Unauthenticated Privilege Escalation via 'form_id' Parameter vulnerability

Unauthenticated Privilege Escalation via 'formid' Parameter vulnerability discovered by 0xd4rk5id3 - EnvoraSec in WordPress Plugin Divi Membership versions = 2.2.0...

WordPress Divi Membership plugin <= 2.3.0 - Unauthenticated Authentication Bypass via 'paypal_param' Parameter vulnerability

Unauthenticated Authentication Bypass via 'paypalparam' Parameter vulnerability discovered by 0xd4rk5id3 - EnvoraSec in WordPress Plugin Divi Membership versions = 2.3.0...

CVE-2026-19660

The Divi Membership plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.3.0. The processpaypalcallback function, hooked to the init action, accepts a base64-encoded paypalparam GET parameter with no IPN validation, no cryptographic signature check, ...