Vendors / Divi Engine Records 6 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 5
CVSS high 1
Exploited now Divi Engine records in CISA KEV No Divi Engine vulnerabilities are listed in CISA KEV.
Priority MEDIUM 55
The Divi Form Builder plugin for WordPress is vulnerable to Arbitrary File Upload leading to Remote Code Execution in all versions up to and including 5.1.8.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03484 · Published 2026-07-02 · No fix listed CWE-434
Priority MEDIUM 50
The Divi Membership plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.3.0.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00575 · Published 2026-10-02 · No fix listed CWE-287
Priority MEDIUM 50
The Divi Ajax Filter plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.1.2 via the 'custom_loop_template' parameter parameter.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00825 · Published 2026-09-04 · No fix listed CWE-98
Priority MEDIUM 49
The Divi Membership plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 2.2.0.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00333 · Published 2026-10-02 · No fix listed CWE-269
Priority MEDIUM 49
The Divi Form Builder plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 5.1.2.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00487 · Published 2026-05-21 · No fix listed CWE-269
Priority MEDIUM 40
The Divi Form Builder plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 5.1.8.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00442 · Published 2026-07-09 · No fix listed CWE-639
Open these records in search → All records by CVSS severity
5 1 0 0 0
THREATIST.IORead the docs