Divi Form Builder Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in the Divi Form Builder plugin for WordPress, affecting versions through 5.1.2. The issue arises because the plugin allows users to manipulate the 'role' parameter in POST data during user registration, without proper validation against the default_user_role setting. This flaw enables unauthenticated attackers to create administrator accounts by exploiting the role parameter.

Impact

Exploitation of this vulnerability allows unauthenticated users to gain administrative privileges on the WordPress site.

Remediation

Users can update to version 5.1.3 or a newer patched version to address this vulnerability.