Skip to content
OpenAdvisories

Vendor

Divi Engine

4 known vulnerabilities.

Products

Divi Form Builder 3 Divi Ajax Filter 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-5523

    Divi Form Builder <= 5.1.8 - Authenticated (Subscriber+) Missing Authorization to Privilege Escalation via User Profile Update Form

    The Divi Form Builder plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 5.1.8. This is due to the update_user() function accepting a user ID parameter from form submissions without verifying that the authenticated u…

    Divi Engine Divi Form Builder Web / CMS