Description
WordPress Plugin Divi Builder is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently manipulate posts. WordPress Plugin Divi Builder version 1.2.3 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.2.4 or latest
References
http://www.pritect.net/blog/elegant-themes-security-vulnerability
http://wptavern.com/critical-security-vulnerability-discovered-in-elegant-themes-products
http://us7.campaign-archive2.com/?u=9ae7aa91c578052b052b864d6&id=85b5d27651
Related Vulnerabilities
WordPress 5.1.x Cross-Site Request Forgery (5.1)
Nginx Uncontrolled Resource Consumption Vulnerability (CVE-2018-16843)
WordPress Plugin Contact Form 7 Privilege Escalation (5.0.3)
Oracle JRE CVE-2014-0446 Vulnerability (CVE-2014-0446)
WordPress Plugin BAVOKO SEO Tools-All-in-One WordPress SEO Security Bypass (2.1.9.7)