Advisories · Technology
themefusecom Brizy – Page Builder.
Every CVE that names themefusecom Brizy – Page Builder among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.4 Medium
Brizy <= 2.8.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'brizy-compiled-sections' Post Meta
- themefusecom Brizy – Page Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Brizy – Page Builder <= 2.8.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'rootAttributes' Parameter
- themefusecom Brizy – Page Builder
- Cross-site scripting (XSS)
- CVSS 7.2 High
Brizy – Page Builder <= 2.8.11 - Unauthenticated Stored Cross-Site Scripting via FileUpload Field Value
- themefusecom Brizy – Page Builder
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
Brizy – Page Builder <= 2.7.16 - Authenticated (Contributor+) Sensitive Information Exposure via get_users Function
- themefusecom Brizy – Page Builder
- Information disclosure
- CVSS 5.3 Medium
Brizy <= 2.6.20 - Missing Authorization to Unauthenticated Limited File Upload
- themefusecom Brizy – Page Builder
- Broken access control
- CVSS 6.4 Medium
Brizy – Page Builder <= 2.6.8 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
- themefusecom Brizy – Page Builder
- Cross-site scripting (XSS)
- CVSS 9.9 CriticalCritical · CVSS 9+
Brizy – Page Builder <= 2.6.4 - Authenticated (Contributor+) Arbitrary File Upload via storeUploads
- themefusecom Brizy – Page Builder
- Unrestricted file upload
- CVSS 4.3 Medium
Brizy – Page Builder <= 2.5.1 - Cross-Site Request Forgery
- themefusecom Brizy – Page Builder
- CWE-20
- CVSS 8.8 High
Brizy – Page Builder <= 2.4.44 - Authenticated (Contributor+) Arbitrary File Upload
- themefusecom Brizy – Page Builder
- Unrestricted file upload
- CVSS 7.1 High
Brizy – Page Builder <= 2.4.44 - Missing Authorization to Authenticated (Contributor+) Post Modification
- themefusecom Brizy – Page Builder
- Broken access control
- CVSS 6.4 Medium
Brizy – Page Builder <= 2.4.43 - Authenticated(Contributor+) Stored Cross-Site Scripting via Form Functionality
- themefusecom Brizy – Page Builder
- Cross-site scripting (XSS)
- CVSS 7.4 High
Brizy – Page Builder <= 2.4.43 - Authenticated (Contributor+) Store Cross-Site Scripting via Widget Link To URL
- themefusecom Brizy – Page Builder
- Cross-site scripting (XSS)
- CVSS 7.1 High
Brizy – Page Builder <= 2.4.41 - Authenticated(Contributor+) Stored Cross-Site Scripting
- themefusecom Brizy – Page Builder
- Cross-site scripting (XSS)
- CVSS 7.2 High
Brizy – Page Builder <= 2.4.43 - Unauthenticated Stored Cross-Site Scripting via Form
- themefusecom Brizy – Page Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Brizy – Page Builder <= 2.4.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Attributes
- themefusecom Brizy – Page Builder
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
Brizy – Page Builder <= 2.4.43 - Missing Authorization
- themefusecom Brizy – Page Builder
- Broken access control
- CVSS 6.4 Medium
Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scripting
- themefusecom Brizy – Page Builder
- Cross-site scripting (XSS)
- CVSS 8.8 High
Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Arbitrary File Upload
- themefusecom Brizy – Page Builder
- Unrestricted file upload
- CVSS 6.4 Medium
Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scripting
- themefusecom Brizy – Page Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scripting
- themefusecom Brizy – Page Builder
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
Brizy – Page Builder <= 2.4.39 - Authenticated (Contributor+) Directory Traversal
- themefusecom Brizy – Page Builder
- Path traversal
- CVSS 7.4 High
Brizy < 1.0.126 - Authorization Bypass to Settings Updates
- themefusecom Brizy – Page Builder
- Broken access control
- CVSS 3.7 Low
Brizy Page Builder <= 2.4.18 - IP Address Spoofing to Protection Mechanism Bypass
- themefusecom Brizy – Page Builder
- CWE-348