Divi Form Builder vulnerabilities
3 known vulnerabilities in Divi Form Builder from Divi Engine. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
Divi Form Builder: Authorization Bypass Through User-Controlled Key
The Divi Form Builder plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 5.1.8. This is due to the update_user() function accepting a user ID parameter from form submissions without verifying that the authenticated us
- 9.8 Critical severity
Divi Form Builder: Unrestricted Upload of File with Dangerous Type
The Divi Form Builder plugin for WordPress is vulnerable to Arbitrary File Upload leading to Remote Code Execution in all versions up to and including 5.1.8. This is due to insufficient file extension validation in the do_image_upload() function where user-sup
- 9.8 Critical severity
Divi Form Builder: Improper Privilege Management
The Divi Form Builder plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 5.1.2. This is due to the plugin accepting a user-controlled 'role' parameter from POST data during user registration without validating it again