
Divi Form Builder <= 5.1.2 — Unauthenticated Privilege Escalation via Role Injection

Exploit-WordPress Plugin The True Ranker 2.2.2 - Arbitrary File Read


YARPP <= 5.30.10 - Missing Authorization

CVE-2026-58480 / CVE-2026-15158 — Unauthenticated RCE in Blocksy Companion Pro < 2.1.47 (300K+ installs). Pre-auth arbitrary file upload via…