CVE-2026-1829

8.8 Élevée

Publiée le 02/06/2026 à 22:16 · Modifiée le 22/07/2026 à 21:10 · Analyse NVD reportée · Source : security@wordfence.com

Description

The Content Visibility for Divi Builder plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.02 via the 'et_pb_text' shortcode 'cvdb_content_visibility_check' parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to execute code on the server.

Traduire en français

Produits concernés

jhorowitz Content Visibility for Divi Builder

Scores CVSS

Version	Score	Source	Vecteur
3.1	8.8 Élevée	security@wordfence.com	`CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-94

Références

https://plugins.trac.wordpress.org/browser/content-visibility-for-divi-builder/tags/4.01/includes/plugin.class.php#L229
https://plugins.trac.wordpress.org/changeset/3543621/content-visibility-for-divi-builder
https://www.wordfence.com/threat-intel/vulnerabilities/id/2ea89c44-8ed0-4ab7-a049-4d1b03a898c7?source=cve

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories