CVE-2026-19652 | DiviEngine Divi Membership Plugin up to 2.2.0 on WordPress Registration Form dmem_form_submit_handler form_id privileges management

October 2, 2026 Yanac

A vulnerability described as critical has been identified in DiviEngine Divi Membership Plugin up to 2.2.0 on WordPress. This affects the function dmem_form_submit_handler of the component Registration Form. The manipulation of the argument form_id results in improper privilege management.

This vulnerability is cataloged as CVE-2026-19652. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More