Brizy vulnerabilities
We track 5 vulnerabilities in Brizy products across 3 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on April 9, 2025.
Latest Brizy vulnerabilities
- 8.8 High severity
Brizy Pro: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in Brizy Brizy Pro allows Cross Site Request Forgery.This issue affects Brizy Pro: from n/a through 2.6.1.
- 8.8 High severity
Brizy Pro: Missing Authorization
Missing Authorization vulnerability in Brizy Brizy Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Brizy Pro: from n/a through 2.6.1.
- 8.8 High severity
Brizy – Page Builder: Unrestricted Upload of File with Dangerous Type
The Brizy – Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'storeUploads' function in all versions up to, and including, 2.6.4. This makes it possible for authenticated attackers, with Contr
- 8.8 High severity
Brizy – Page Builder: Unrestricted Upload of File with Dangerous Type
The Brizy – Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file extension validation in the validateImageContent function called via storeImages in all versions up to, and including, 2.4.43. This makes it possible for
- 8.8 High severity
Brizy – Page Builder: Unrestricted Upload of File with Dangerous Type
The Brizy – Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the storeImages function in all versions up to, and including, 2.4.40. This makes it possible for authenticated attackers, with contrib