Lucene search
K

12 matches found

RedhatCVE
RedhatCVE
added 2026/06/05 7:19 p.m.6 views

CVE-2026-5118

The Divi Form Builder plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 5.1.2. This is due to the plugin accepting a user-controlled 'role' parameter from POST data during user registration without validating it against the form's configured...

9.8CVSS5.5AI score0.00452EPSS
Exploits4References1
GithubExploit
GithubExploit
added 2026/05/22 7:53 a.m.54 views

Exploit for CVE-2026-5118

CVE-2026-5118 — Divi Form Builder roles && !isset$rolesobj-...

9.8CVSS5.8AI score0.00452EPSS
Exploits4
GithubExploit
GithubExploit
added 2026/05/21 10:45 p.m.69 views

Exploit for CVE-2026-5118

Divi Form Builder ⚠️ WARNING: This tool is for authorized p...

9.8CVSS5.9AI score0.00452EPSS
Exploits4
NVD
NVD
added 2026/05/21 1:16 p.m.12 views

CVE-2026-5118

The Divi Form Builder plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 5.1.2. This is due to the plugin accepting a user-controlled 'role' parameter from POST data during user registration without validating it against the form's configured...

9.8CVSS0.00452EPSS
Exploits4References2
CVE
CVE
added 2026/05/21 11:32 a.m.17 views

CVE-2026-5118

CVE-2026-5118 affects Divi Form Builder for WordPress (

9.8CVSS5.8AI score0.00452EPSS
Exploits4References2
ATTACKERKB
ATTACKERKB
added 2026/05/21 11:32 a.m.9 views

CVE-2026-5118

The Divi Form Builder plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 5.1.2. This is due to the plugin accepting a user-controlled 'role' parameter from POST data during user registration without validating it against the form's configured...

9.8CVSS5.8AI score0.00452EPSS
Exploits4References3
EUVD
EUVD
added 2026/05/21 11:32 a.m.8 views

EUVD-2026-31270

The Divi Form Builder plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 5.1.2. This is due to the plugin accepting a user-controlled 'role' parameter from POST data during user registration without validating it against the form's configured...

9.8CVSS5.8AI score0.00452EPSS
Exploits4References2
Cvelist
Cvelist
added 2026/05/21 11:32 a.m.36 views

CVE-2026-5118 Divi Form Builder <= 5.1.2 - Unauthenticated Privilege Escalation via 'role'

The Divi Form Builder plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 5.1.2. This is due to the plugin accepting a user-controlled 'role' parameter from POST data during user registration without validating it against the form's configured...

9.8CVSS0.00452EPSS
Exploits4References2
GithubExploit
GithubExploit
added 2026/05/21 10:12 a.m.79 views

Exploit for CVE-2026-5118

🔥 CVE-2026-5118 Divi Form Builder --- 🎯 Ring...

5.8AI score0.00452EPSS
Exploits4
Positive Technologies
Positive Technologies
added 2026/05/21 12:0 a.m.15 views

PT-2026-42460

Name of the Vulnerable Software and Affected Versions Divi Form Builder versions prior to 5.1.3 Description The Divi Form Builder plugin for WordPress allows unauthenticated attackers to create administrator accounts. This occurs because the plugin accepts a user-controlled role parameter from PO...

9.8CVSS5.8AI score0.00452EPSS
Exploits4References5
CNNVD
CNNVD
added 2026/05/21 12:0 a.m.7 views

WordPress plugin Divi Form Builder 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

9.8CVSS5.8AI score0.00452EPSS
Exploits4References1
Patchstack
Patchstack
added 2023/07/18 12:0 a.m.8 views

WordPress Divi Form Builder With Material Design Plugin < 8.1.3 is vulnerable to Cross Site Scripting (XSS)

Software Divi Form Builder With Material Design Type Plugin Vulnerable versions 8.1.3 Fixed in 8.1.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID e9a0c599a921 Credits Rafie...

6.4AI score0.00284EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder