Skip to content
OpenAdvisories

Vendor

Divi Engine

4 known vulnerabilities.

Products

Divi Form Builder 3 Divi Ajax Filter 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-11613 Public exploit

    Divi Ajax Filter <= 5.1.2 - Unauthenticated Local File Inclusion via 'custom_loop_template' Parameter

    The Divi Ajax Filter plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.1.2 via the 'custom_loop_template' parameter parameter. This makes it possible for unauthenticated attackers to include and execute arbitra…

    Divi Engine Divi Ajax Filter Web / CMS
  • Critical 9.8
    CVE-2026-5524 Public exploit

    Divi Form Builder <= 5.1.8 - Unauthenticated Arbitrary File Upload Leading to Remote Code Execution via 'acceptFileTypes' Parameter

    The Divi Form Builder plugin for WordPress is vulnerable to Arbitrary File Upload leading to Remote Code Execution in all versions up to and including 5.1.8. This is due to insufficient file extension validation in the do_image_upload() function where user-su…

    Divi Engine Divi Form Builder Web / CMS
  • Critical 9.8
    CVE-2026-5118 Public exploit

    Divi Form Builder <= 5.1.2 - Unauthenticated Privilege Escalation via 'role'

    The Divi Form Builder plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 5.1.2. This is due to the plugin accepting a user-controlled 'role' parameter from POST data during user registration without validating it agai…

    Divi Engine Divi Form Builder Web / CMS