CVE Browser

Brizy – Page Builder <= 2.8.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'rootAttributes' Parameter

Brizy – Page Builder <= 2.8.11 - Unauthenticated Stored Cross-Site Scripting via FileUpload Field Value

WordPress Brizy plugin <= 2.7.23 - Broken Access Control vulnerability

Brizy – Page Builder <= 2.7.16 - Authenticated (Contributor+) Sensitive Information Exposure via get_users Function

WordPress Brizy Plugin <= 2.7.12 - Broken Access Control Vulnerability

Brizy <= 2.6.20 - Missing Authorization to Unauthenticated Limited File Upload

WordPress Brizy plugin <= 2.7.7 - Cross Site Scripting (XSS) vulnerability

Brizy – Page Builder <= 2.6.8 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

Brizy – Page Builder <= 2.6.4 - Authenticated (Contributor+) Arbitrary File Upload via storeUploads

WordPress ThemeFuse Maintenance Mode plugin <= 1.1.3 - CSRF to Stored XSS vulnerability

Brizy – Page Builder <= 2.5.1 - Cross-Site Request Forgery

Brizy – Page Builder <= 2.4.44 - Authenticated (Contributor+) Arbitrary File Upload

Brizy – Page Builder <= 2.4.44 - Missing Authorization to Authenticated (Contributor+) Post Modification

Brizy – Page Builder <= 2.4.43 - Authenticated(Contributor+) Stored Cross-Site Scripting via Form Functionality

Brizy – Page Builder <= 2.4.43 - Authenticated (Contributor+) Store Cross-Site Scripting via Widget Link To URL

Brizy – Page Builder <= 2.4.41 - Authenticated(Contributor+) Stored Cross-Site Scripting

Brizy – Page Builder <= 2.4.43 - Unauthenticated Stored Cross-Site Scripting via Form

Brizy – Page Builder <= 2.4.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Attributes

Brizy – Page Builder <= 2.4.43 - Missing Authorization

Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scripting

Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Arbitrary File Upload

Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scripting

Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scripting

Brizy – Page Builder <= 2.4.39 - Authenticated (Contributor+) Directory Traversal

Brizy < 1.0.126 - Authorization Bypass to Settings Updates