CVE-2026-5118

CVE-2026-5118 CVE-2026-5118-expwordpressDivi Form Builder...

CVE-2026-PoCs

💀 Exploit-Index: The Ultimate CVE Proof of Concept PoC & Exploit Database 150,000+ Verified Exploits & PoCs for Cybersecurity Research All In One Place Explore the Interactive Portal • View the JSON Index • Browse CVEs 📖 About SecureWithUmer/Exploit-Index is the world's premier, zero-API aggregat...

CVE-2026-5524-PoC

CVE-2026-5524 — Divi Form Builder 인증되지 않은 RCE WordPress 플러그인 Divi Form Builder = 5.1.8의 인증되지 않은 임의 파일 업로드 취약점인 CVE-2026-5524 를 위한 대량 익스플로잇 툴킷으로, 원격 코드 실행으로 이어집니다. Field| Value ---|--- CVE| 2026-5524 CVSS| 9.8 Critical Vector| AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected| Divi Form Builder = 5.1.8...

Divi Form Builder <=5.1.8 - Unauthenticated Arbitrary File Upload RCE

The Divi Form Builder plugin for WordPress versions 5.1.8 and prior contains an unauthenticated arbitrary file upload vulnerability in the doimageupload AJAX handler. The user-controlled acceptFileTypes POST parameter is injected unsanitized into a PHP regex for file extension validation. By...

CVE-2026-5118

CVE-2026-5118 — Divi Form Builder = 5.1.2 — Unauthenticated Privilege Escalation via Role Injection 🔥 Vulnerability Summary The WordPress plugin Divi Form Builder versions = 5.1.2 is vulnerable to an unauthenticated privilege escalation vulnerability. This critical flaw allows unauthenticated...

CVE-2026-5118

⚡ CVE-2026-5118 Divi Form Builder — 인증되지 않은 권한 상승 "보안 연구" • "방어적 탐지" • "취약점 연구" --- 🔥 개요 CVE-2026-5118은 Divi Form Builder 5.1.2 이하 버전에 영향을 미치는 인증되지 않은 권한 상승 취약점입니다. 이 문제는 사용자가 제어하는 등록 매개변수에 대한 불충분한 검증과 관련되어 있으며, 등록 데이터가 요청된 WordPress 사용자 역할에 영향을 미칠 수 있도록 허용합니다. 이 저장소는 승인된 보안 테스트를 위한 연구 및 방어적 탐지...

CVE-2026-5118

Divi Form Builder ⚠️ 경고: 이 도구는 공인된 침투 테스트 및 보안 연구용입니다. 승인되지 않은 컴퓨터 시스템 접근은 불법입니다. 소유권이 있거나 명시적인 서면 허가를 받은 시스템에서만 사용하십시오. 추가 면책 조항: Jenderal92의 표지에서 면책 조항을 확인할 수 있습니다. 여기서 확인하세요 !!! 개요 이 Python 2 스크립트는 Divi WordPress 플러그인및 관련 Divi 양식의 권한 상승 취약점을 악용합니다. 다음 방법을 통해 원격으로 관리자 계정을 등록할 수 있습니다: 대상의 Divi 등록...

CVE-2026-5118

CVE-2026-5118 — Divi Form Builder ≤ 5.1.2 Unauthenticated Privilege Escalation via Role Injection === Beelze zeroday 1diot9 === 📋 Vulnerability Info Field| Details ---|--- CVE ID| CVE-2026-5118 CVSS Score| 9.8 Critical CVSS Vector| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE| CWE-269 —...

CVE-2026-5118

🔥 CVE-2026-5118 Divi Form Builder 숨겨진 필드 하나. 변경된 값 하나. 전체 웹사이트에 대한 완전한 액세스. 🧨 공격자가 할 수 있는 일 능력| 영향 ---|--- 🔑 로그인 없이 관리자 계정 생성| 전체 사이트 장악 📦 WooCommerce 고객 데이터 액세스| 데이터 유출 💉 플러그인/테마 파일PHP 편집| 원격 코드 실행 🕳️ 숨겨진 백도어 생성| 지속적 액세스 👥 모든 사용자 데이터 열람| 개인정보 침해 🔬 취약점 분석 취약점 위치...

Exploit for CVE-2026-5118

⚡ CVE-2026-5118 Divi Form Builder — Unauthenticated Privilege E...

CVE-2026-5524-PoC

CVE-2026-5524 — Divi Form Builder Unauthenticated RCE Mass exploit toolkit for CVE-2026-5524 , an unauthenticated arbitrary file upload vulnerability in the WordPress plugin Divi Form Builder = 5.1.8 leading to remote code execution. Field| Value ---|--- CVE| 2026-5524 CVSS| 9.8 Critical Vector|...

Exploit for CVE-2026-5118

CVE-2026-5118 — Divi Form Builder ≤ 5.1.2 Unauthenticated Pr...

CVE-2026-5523

The Divi Form Builder plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 5.1.8. This is due to the updateuser function accepting a user ID parameter from form submissions without verifying that the authenticated user has permission to edit that specific...

CVE-2026-5523

The Divi Form Builder plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 5.1.8. This is due to the updateuser function accepting a user ID parameter from form submissions without verifying that the authenticated user has permission to edit that specific...

EUVD-2026-42506

The Divi Form Builder plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 5.1.8. This is due to the updateuser function accepting a user ID parameter from form submissions without verifying that the authenticated user has permission to edit that specific...

CVE-2026-5523 Divi Form Builder <= 5.1.8 - Authenticated (Subscriber+) Missing Authorization to Privilege Escalation via User Profile Update Form

The Divi Form Builder plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 5.1.8. This is due to the updateuser function accepting a user ID parameter from form submissions without verifying that the authenticated user has permission to edit that specific...

CVE-2026-5523

The CVE describes a privilege-escalation flaw in the Divi Form Builder plugin for WordPress (versions up to and including 5.1.8). The root cause is missing authorization checks: update_user() accepts a user ID from form submissions without validating the editor’s permission for that target user, ...

CVE-2026-5523 Divi Form Builder <= 5.1.8 - Authenticated (Subscriber+) Missing Authorization to Privilege Escalation via User Profile Update Form

The Divi Form Builder plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 5.1.8. This is due to the updateuser function accepting a user ID parameter from form submissions without verifying that the authenticated user has permission to edit that specific...

PT-2026-56697

The Divi Form Builder plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 5.1.8. This is due to the update user function accepting a user ID parameter from form submissions without verifying that the authenticated user has permission to edit that specific...

CVE-2026-5523: Authorization Bypass Through User-Controlled Key

The Divi Form Builder plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 5.1.8. This is due to the updateuser function accepting a user ID parameter from form submissions without verifying that the authenticated user has permission to edit that specific...