Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-15760— Divi Essentials <= 5.8.1 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via dnxte_get_database_data AJAX Action

Quick assessment

Affected
Divi Essential Divi Essentials
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

WordPress 的 Divi Essential 插件在 5.8.1 及之前版本中存在敏感信息泄露漏洞，攻击者可通过 和 这两个 AJAX 操作发起攻击。 这些处理函数仅在有条件地验证 nonce（该检查仅在存在 'nonce' POST 参数时执行，且可通过省略该参数轻松绕过），且从未调用 或以其他方式强制执行权限能力。这使得具有订阅者（Subscriber）及以上权限的已认证攻击者能够枚举 WordPress 数据库中的每一个表，并从任意表中读取由调用者指定数量的行数据——包括 （包含用户名、邮箱、哈希密码

CVSS 6.5 · Medium
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-15760

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Divi Essentials <= 5.8.1 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via dnxte_get_database_data AJAX Action
Source: CVE Program / CVE List V5
Vulnerability Description
The Divi Essential plugin for WordPress is vulnerable to sensitive information exposure in versions up to, and including, 5.8.1 via the dnxte_get_database_tables and dnxte_get_database_data AJAX actions. The handlers only conditionally verify a nonce (the check runs solely when the 'nonce' POST parameter is present and can be trivially bypassed by omitting the parameter) and never call current_user_can() or otherwise enforce a capability. This makes it possible for authenticated attackers, with Subscriber-level access and above, to enumerate every table in the WordPress database and read up to a caller-controlled number of rows from any table — including wp_users (usernames, emails, hashed passwords), wp_usermeta (session tokens, secret keys), and wp_options (privileged settings, API keys, credentials stored by other plugins).
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
授权机制缺失
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Divi Essential Divi Essentials 0 ~ 5.8.1 -

II. Public POCs for CVE-2026-15760

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-15760

请登录查看更多情报信息。

Other References for CVE-2026-15760 (2)

IV. Related Vulnerabilities

Same weakness: CWE-862

V. Comments for CVE-2026-15760

No comments yet

Leave a comment