Divi Engine vulnerabilities
4 published CVEs name Divi Engine among the affected products.
- 4Published CVEs4 of them scored
- 4Last 12 monthspublished in the last year
- 3Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-11613
Divi Ajax Filter <= 5.1.2 - Unauthenticated Local File Inclusion via 'custom_loop_template' Parameter
Divi Engine · Divi Ajax Filter
Critical9.8 - CVE-2026-5523
Divi Form Builder <= 5.1.8 - Authenticated (Subscriber+) Missing Authorization to Privilege Escalation via User Profile Update Form
Divi Engine · Divi Form Builder
High8.8 - CVE-2026-5524
Divi Form Builder <= 5.1.8 - Unauthenticated Arbitrary File Upload Leading to Remote Code Execution via 'acceptFileTypes' Parameter
Divi Engine · Divi Form Builder
Critical9.8 - CVE-2026-5118
Divi Form Builder <= 5.1.2 - Unauthenticated Privilege Escalation via 'role'
Divi Engine · Divi Form Builder
Critical9.8