PoC Archive PoC Archive

tag

Role-Injection

Critical
Fox LMS `createOrder` Unauthenticated Privilege Escalation to Administrator (CVE-2025-14156)
CVE-2025-14156· Fox LMS (WordPress LMS plugin) unpatched
Critical
Divi Form Builder <= 5.1.2 Unauthenticated Privilege Escalation via Role Injection (CVE-2026-5118)
CVE-2026-5118· Divi Form Builder (WordPress plugin) unpatched