Skip to content
OpenAdvisories

Product · Divi Engine

Divi Form Builder

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-5524 Public exploit Scanner template

    Divi Form Builder <= 5.1.8 - Unauthenticated Arbitrary File Upload Leading to Remote Code Execution via 'acceptFileTypes' Parameter

    The Divi Form Builder plugin for WordPress is vulnerable to Arbitrary File Upload leading to Remote Code Execution in all versions up to and including 5.1.8. This is due to insufficient file extension validation in the do_image_upload() function where user-su…

    Divi Engine Divi Form Builder Web / CMS
  • Critical 9.8
    CVE-2026-5118 Public exploit

    Divi Form Builder <= 5.1.2 - Unauthenticated Privilege Escalation via 'role'

    The Divi Form Builder plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 5.1.2. This is due to the plugin accepting a user-controlled 'role' parameter from POST data during user registration without validating it agai…

    Divi Engine Divi Form Builder Web / CMS