CVE-2026-14321
Divi Dash < 1.0.7 - Unauthenticated Denial of Service via IP Address Spoofing
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The divi-dash WordPress plugin before 1.0.7 does not validate the source of the client IP address it uses for rate limiting and banning, allowing unauthenticated attackers to spoof arbitrary IP addresses in order to bypass rate limiting, ban chosen addresses from the feature, and grow a stored option without bound, resulting in denial of service.
| Vendor | unknown |
| Product | divi-dash |
| Published | Sep 23, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown divi-dash
Be the first to know when new unknown vulnerabilities affecting unknown divi-dash are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / divi-dash
0 < 1.0.7
References
Credits
Mike Gozdiskowski WPScan