Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Divi Engine vulnerabilities

4 published CVEs name Divi Engine among the affected products.

Newest CVEs

  • CVE-2026-11613

    Divi Ajax Filter <= 5.1.2 - Unauthenticated Local File Inclusion via 'custom_loop_template' Parameter

    Divi Engine · Divi Ajax Filter

    Critical9.8
  • CVE-2026-5523

    Divi Form Builder <= 5.1.8 - Authenticated (Subscriber+) Missing Authorization to Privilege Escalation via User Profile Update Form

    Divi Engine · Divi Form Builder

    High8.8
  • CVE-2026-5524

    Divi Form Builder <= 5.1.8 - Unauthenticated Arbitrary File Upload Leading to Remote Code Execution via 'acceptFileTypes' Parameter

    Divi Engine · Divi Form Builder

    Critical9.8
  • CVE-2026-5118

    Divi Form Builder <= 5.1.2 - Unauthenticated Privilege Escalation via 'role'

    Divi Engine · Divi Form Builder

    Critical9.8