Brizy – Page Builder vulnerabilities
4 known vulnerabilities in Brizy – Page Builder from Themefusecom. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.2 High severity
Brizy – Page Builder: Improper Neutralization of Input During Web Page Generation
The Brizy – Page Builder plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting in all versions up to, and including, 2.8.11 This is due to a combination of missing nonce verification for unauthenticated form submissions, insufficien
- 8.8 High severity
Brizy – Page Builder: Unrestricted Upload of File with Dangerous Type
The Brizy – Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'storeUploads' function in all versions up to, and including, 2.6.4. This makes it possible for authenticated attackers, with Contr
- 8.8 High severity
Brizy – Page Builder: Unrestricted Upload of File with Dangerous Type
The Brizy – Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file extension validation in the validateImageContent function called via storeImages in all versions up to, and including, 2.4.43. This makes it possible for
- 8.8 High severity
Brizy – Page Builder: Unrestricted Upload of File with Dangerous Type
The Brizy – Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the storeImages function in all versions up to, and including, 2.4.40. This makes it possible for authenticated attackers, with contrib