DDivi Engine

Products

Exploited and recent CVEs

• CVE-2026-11613 Critical 9.8 Divi Ajax Filter <= 5.1.2 - Unauthenticated Local File Inclusion via 'custom_loop_template' Parameter 0.8%
• CVE-2026-5523 High 8.8 Divi Form Builder <= 5.1.8 - Authenticated (Subscriber+) Missing Authorization to Privilege Escalation via User Profile Update Form 0.4%
• CVE-2026-5524 Critical 9.8 Divi Form Builder <= 5.1.8 - Unauthenticated Arbitrary File Upload Leading to Remote Code Execution via 'acceptFileTypes' Parameter 3.5%
• CVE-2026-5118 Critical 9.8 Divi Form Builder <= 5.1.2 - Unauthenticated Privilege Escalation via 'role' 0.5%