brizy-page_builder vulnerabilities
2 known vulnerabilities in brizy-page_builder from Brizy. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
0critical
2high
0exploited
8.8average CVSS score
Latest first
- 8.8 High severity
Brizy – Page Builder: Unrestricted Upload of File with Dangerous Type
The Brizy – Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file extension validation in the validateImageContent function called via storeImages in all versions up to, and including, 2.4.43. This makes it possible for
- 8.8 High severity
Brizy – Page Builder: Unrestricted Upload of File with Dangerous Type
The Brizy – Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the storeImages function in all versions up to, and including, 2.4.40. This makes it possible for authenticated attackers, with contrib