{"vulnerability": "CVE-2026-5118", "sightings": [{"uuid": "eb6ff21a-0455-4797-9a2c-551044e1833d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5118", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mmejs5dpod2l", "content": "CVE-2026-5118 divi-form-builder (CVSS Score 9.8) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-21T13:32:06.851429Z"}, {"uuid": "d6032171-e155-4f78-9edb-0858a6911687", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-5118", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116613042087511317", "content": "\ud83d\udea8 CRITICAL: CVE-2026-5118 in Divi Form Builder (\u22645.1.2) lets unauth'd users gain admin privileges via unvalidated 'role' parameter. Disable registration & monitor for patches! https://radar.offseq.com/threat/cve-2026-5118-cwe-269-improper-privilege-managemen-c310b7ad #OffSeq #WordPress #PrivilegeEscalation #Vuln", "creation_timestamp": "2026-05-21T14:30:12.295493Z"}, {"uuid": "82657753-33fb-4c63-aa1c-e5af5a2b0190", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-5118", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mmen22j7ea2d", "content": "Divi Form Builder (\u22645.1.2) flaw: Unauth'd attackers can create admin accounts due to improper privilege management (CRITICAL). Disable registration & watch for patches. https://radar.offseq.com/threat/cve-2026-5118-cwe-269-improper-privilege-managemen-c310b7ad #OffSeq #WordPress #Vulnerability", "creation_timestamp": "2026-05-21T14:30:14.201469Z"}, {"uuid": "162e1b76-1536-4010-9052-06518a31e16b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5118", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/85230", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #EXP\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-5118\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a puj790201-lab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-21 13:08:21\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-5118-exp_wordpress_Divi Form Builder\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-21T14:00:04.000000Z"}, {"uuid": "d53914dc-2451-4d5f-9e62-c03a3f8b1f18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5118", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmestnmsnq2h", "content": "CVE-2026-5118 - Divi Form Builder\nCVE ID : CVE-2026-5118\n \n Published : May 21, 2026, 1:16 p.m. | 1\u00a0hour, 1\u00a0minute ago\n \n Description : The Divi Form Builder plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 5.1.2. This is due to the ...", "creation_timestamp": "2026-05-21T16:14:01.139960Z"}, {"uuid": "9f507225-d1bc-427b-981c-205fb61440a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-5118", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116613513936264451", "content": "\ud83d\udd25 CRITICAL vuln in Divi Form Builder (\u22645.1.2) \u2014 improper privilege management lets attackers create admin accounts via role parameter abuse. Restrict registration & watch for patches! CVE-2026-5118 https://radar.offseq.com/threat/cve-2026-5118-cwe-269-improper-privilege-managemen-c310b7ad #OffSeq #WordPress #CVE20265118 #Infosec", "creation_timestamp": "2026-05-21T16:30:12.193117Z"}, {"uuid": "ec06ede7-4a09-405b-a039-bb866fe48ecc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5118", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmev25zuwl2i", "content": "CVE-2026-5118 - Divi Form Builder\nCVE ID : CVE-2026-5118\n \n Published : May 21, 2026, 1:16 p.m. | 1\u00a0hour, 5\u00a0minutes ago\n \n Description : The Divi Form Builder plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 5.1.2. This is due to the...", "creation_timestamp": "2026-05-21T16:53:27.211524Z"}, {"uuid": "124df6d4-76e6-4cbc-aebf-b12f6a0efafd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5118", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/85293", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-5118\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Jenderal92\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-21 22:53:12\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-5118 \u2013 Python2 mass exploit for Divi WordPress plugin Unauthenticated administrator registration via admin-ajax.php. Multi\u2011threaded scanner with nonce extraction.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-21T23:00:04.000000Z"}, {"uuid": "fa66ed26-2bc0-4be8-b27a-c5706be72412", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5118", "type": "seen", "source": "Telegram/Ijp4jLwZAukIpjn8nmvArm7-nJ19glZ2axxpP-42cGx43y8", "content": "", "creation_timestamp": "2026-05-22T11:00:14.000000Z"}, {"uuid": "a85ec552-87b0-4d15-a136-a285eced7086", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5118", "type": "seen", "source": "Telegram/fDw4Vf6kwSJ_QsbQNJIzm_DiAG17CwOFTjdetOv1ULjFhQI", "content": "", "creation_timestamp": "2026-05-22T03:00:12.000000Z"}, {"uuid": "9d1af68b-63af-4f8e-9346-1a4dadbe2088", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5118", "type": "seen", "source": "Telegram/EQ-OtrMk-MWFYtaQdS6-MjZwABKlvl-CaVDrJmD_M-e-p2s", "content": "", "creation_timestamp": "2026-05-22T03:00:06.000000Z"}, {"uuid": "5d3b7472-4bd7-4765-b62a-2c12a45d2471", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5118", "type": "seen", "source": "Telegram/QQT-Q6OUMbbPAX_T-HqeuIDXp1trXX8UiN3jKLc_4d4AIZQ", "content": "", "creation_timestamp": "2026-05-22T15:00:07.000000Z"}, {"uuid": "6de8d815-8d41-49c3-80da-0ab67b4334e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5118", "type": "seen", "source": "Telegram/6gh1HJgE3RFVn7K8UtbcJPp_JwEYzEQXCykvkUTLZjGZEDc", "content": "", "creation_timestamp": "2026-05-21T21:00:05.000000Z"}, {"uuid": "f8295f95-4dce-47f9-9438-fd2d0c34bfac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5118", "type": "seen", "source": "Telegram/srrws2G_oqnzo18NHrsMZQVnJlAuG4EubtN588eV7RqbvrI", "content": "", "creation_timestamp": "2026-05-21T11:00:14.000000Z"}, {"uuid": "433bc637-0a87-408f-a1ca-fbcd2747f226", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5118", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motsyufjn52v", "content": "\ud83d\udea8  ALERT: CVE-2026-5118\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nThe Divi Form Builder plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 5.1.2. This is due to the plugin accepting a user-controlled 'role' parameter from POST data during user registration without validat", "creation_timestamp": "2026-06-22T02:17:15.151413Z"}, {"uuid": "8c2472e2-cfb2-4faf-80d0-b7d572a4e88c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5118", "type": "seen", "source": "Telegram/ZNGVAW0zhrADVMYcivddvXHsbsrHu8mw5aVpNdLKw8FVQFo", "content": "", "creation_timestamp": "2026-07-16T19:00:10.209537Z"}, {"uuid": "1e078926-f885-4aa5-adf1-88663d63d1bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5118", "type": "published-proof-of-concept", "source": "Telegram/ZNGVAW0zhrADVMYcivddvXHsbsrHu8mw5aVpNdLKw8FVQFo", "content": "", "creation_timestamp": "2026-07-17T00:00:07.814667Z"}, {"uuid": "f7d800f4-d8cb-4fac-8a1d-48ff716aea26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5118", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/418", "content": "CVE-2026-5118\n\nThe Divi Form Builder plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 5.1.2. This is due to the plugin accepting a user-controlled 'role' parameter from POST data during user registration without validating it against the form's configured defaultuserrole setting. This makes it possible for unauthenticated attackers to create administrator accounts by tampering with the role parameter during registration.", "creation_timestamp": "2026-08-28T00:00:33.152007Z"}, {"uuid": "9e66e797-327d-475f-b2e7-7e2cb2a173b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5118", "type": "seen", "source": "https://t.me/cve0day/418", "content": "CVE-2026-5118\n\nThe Divi Form Builder plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 5.1.2. This is due to the plugin accepting a user-controlled 'role' parameter from POST data during user registration without validating it against the form's configured defaultuserrole setting. This makes it possible for unauthenticated attackers to create administrator accounts by tampering with the role parameter during registration.", "creation_timestamp": "2026-08-27T15:00:07.431450Z"}, {"uuid": "4c2560fa-6f9b-4499-9200-95381852088f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5118", "type": "seen", "source": "Telegram/hZmD1B52vHq6fSvKEDWDKrOWX_CbgCpeltfI-CsbFj8gh80", "content": "", "creation_timestamp": "2026-09-07T08:00:05.411006Z"}, {"uuid": "efdf0dd9-4aaa-4322-9a26-ad0482b62549", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5118", "type": "published-proof-of-concept", "source": "Telegram/hZmD1B52vHq6fSvKEDWDKrOWX_CbgCpeltfI-CsbFj8gh80", "content": "", "creation_timestamp": "2026-09-08T00:00:51.868814Z"}]}