All 3 CVE vulnerabilities found in Divi Form Builder, with AI-generated Chinese analysis, references, and POCs.
Vendor: Divi Engine
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-5523 | Divi Form Builder <= 5.1.8 - Authenticated (Subscriber+) Missing Authorization to Privilege Escalation via User Profile Update Form CWE-639 | 8.8 | High | 2026-07-09 |
| CVE-2026-5524 | Divi Form Builder <= 5.1.8 - Unauthenticated Arbitrary File Upload Leading to Remote Code Execution via 'acceptFileTypes' Parameter CWE-434 | 9.8 | Critical | 2026-07-02 |
| CVE-2026-5118 | Divi Form Builder <= 5.1.2 - Unauthenticated Privilege Escalation via 'role' CWE-269 | 9.8 | Critical | 2026-05-21 |
All 3 known CVE vulnerabilities affecting Divi Form Builder with full Chinese analysis, references, and POCs where available.