Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The divi-booster WordPress plugin before 5.0.2 does not have authorization and CSRF checks in one of its fixing function, allowing unauthenticated users to modify stored divi-booster WordPress plugin before 5.0.2 options. Furthermore, due to the use of unserialize() on the data, this could be further exploited when combined with a PHP gadget chain to achieve PHP Object Injection
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
CVE-2026-2626 The divi-booster WordPress plugin before 5.0.2 does not have authorization and CSRF checks in one of its fixing function, allowing unauthenticated users to modify store… https://www.cve.org/CVERecord?id=CVE-2026-2626
Post summary
The entry provides an initial disclosure of a missing authorization and CSRF protection in Divi-Booster WordPress plugin, enabling unauthenticated modifications to store settings.
🟠 CVE-2026-2626 - High The divi-booster WordPress plugin before 5.0.2 does not have authorization and CSRF checks in one of its fixing function, allowing unauthenticated users to modify stored divi-booster WordPress... https://www.thehackerwire.com/vulnerability/CVE-2026-2626/ https://t.co/XLLNn8ZdgX
Post summary
The text announces CVE-2026-2626, a high‑severity vulnerability in the Divi Booster WordPress plugin caused by missing authorization and CSRF checks that allow unauthenticated users to modify stored content.