Brizy – Page Builder

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Brizy – Page Builder

Information

Software Type Plugin
Software Slug brizy (view on wordpress.org)
Software Status Active
Software Author themefusecom
Software Website brizy.io
Software Downloads 5,158,772
Software Active Installs 80,000
Software Record Last Updated December 22, 2024

Showing 1-20 of 23 Vulnerabilities

Submit a Vulnerability
Brizy – Page Builder <= 2.5.1 - Cross-Site Request Forgery
4.3
CVE-2024-6254
Aug 7, 2024
Researcher: Xetnus
Brizy – Page Builder <= 2.4.44 - Authenticated (Contributor+) Arbitrary File Upload
8.8
CVE-2024-3242
Jul 17, 2024
Researcher: stealthcopter
Brizy – Page Builder <= 2.4.44 - Missing Authorization to Authenticated (Contributor+) Post Modification
7.1
CVE-2024-1937
Jul 15, 2024
Researcher: stealthcopter
Brizy – Page Builder <= 2.4.43 - Authenticated(Contributor+) Stored Cross-Site Scripting via Form Functionality
6.4
CVE-2024-1164
Jun 4, 2024
Researcher: RandomRoot
Brizy – Page Builder <= 2.4.43 - Unauthenticated Stored Cross-Site Scripting via Form
7.2
CVE-2024-2087
Jun 4, 2024
Researcher: wesley (wcraft)
Brizy – Page Builder <= 2.4.43 - Authenticated (Contributor+) Store Cross-Site Scripting via Widget Link To URL
7.4
CVE-2024-3667
Jun 4, 2024
Researcher: Webbernaut
Brizy – Page Builder <= 2.4.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Attributes
6.4
CVE-2024-1161
Jun 4, 2024
Researcher: wesley (wcraft)
Brizy – Page Builder <= 2.4.43 - Missing Authorization
4.3
CVE-2024-3711
May 22, 2024
Researcher: Lucio Sá
Brizy – Page Builder <= 2.4.41 - Authenticated(Contributor+) Stored Cross-Site Scripting
7.1
CVE-2024-1940
May 6, 2024
Researcher: stealthcopter
Brizy – Page Builder <= 2.4.39 - Authenticated (Contributor+) Directory Traversal
4.3
CVE-2024-1165
Feb 23, 2024
Researcher: wesley (wcraft)
Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2024-1293
Feb 23, 2024
Researcher: Nikolas
Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2024-1296
Feb 23, 2024
Researcher: stealthcopter
Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2024-1291
Feb 23, 2024
Researcher: 0liveira
Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Arbitrary File Upload
8.8
CVE-2024-1311
Feb 23, 2024
Researcher: stealthcopter
Brizy <= 2.4.29 - Cross-Site Scripting
6.4
CVE-2023-51396
Nov 6, 2023
Researcher: emad
Brizy Page Builder <= 2.4.18 - IP Address Spoofing to Protection Mechanism Bypass
3.7
CVE-2023-2897
May 31, 2023
Researcher: Alex Thomas
Brizy Page Builder <= 2.4.1 - Authenticated Stored Cross-Site Scripting via Element Content
5.4
CVE-2022-2041
Jun 21, 2022
Researcher: Vishnupriya Ilango
Brizy Page Builder <= 2.4.1 - Authenticated Stored Cross-Site Scripting via Element URL
5.4
CVE-2022-2040
Jun 21, 2022
Researcher: Vishnupriya Ilango
Brizy Page Builder <= 2.3.11 - Authenticated File Upload and Path Traversal
8.8
CVE-2021-38346
Oct 13, 2021
Researcher: Ram
Brizy - Page Builder <= 2.3.11 - Stored Cross-Site Scripting
6.4
CVE-2021-38344
Oct 13, 2021
Researcher: Ram
Title Status CVE ID CVSS Researchers Date
Brizy – Page Builder <= 2.5.1 - Cross-Site Request Forgery Patched CVE-2024-6254 4.3 Xetnus August 7, 2024
Brizy – Page Builder <= 2.4.44 - Authenticated (Contributor+) Arbitrary File Upload Patched CVE-2024-3242 8.8 stealthcopter July 17, 2024
Brizy – Page Builder <= 2.4.44 - Missing Authorization to Authenticated (Contributor+) Post Modification Patched CVE-2024-1937 7.1 stealthcopter July 15, 2024
Brizy – Page Builder <= 2.4.43 - Authenticated(Contributor+) Stored Cross-Site Scripting via Form Functionality Patched CVE-2024-1164 6.4 RandomRoot June 4, 2024
Brizy – Page Builder <= 2.4.43 - Unauthenticated Stored Cross-Site Scripting via Form Patched CVE-2024-2087 7.2 wesley (wcraft) June 4, 2024
Brizy – Page Builder <= 2.4.43 - Authenticated (Contributor+) Store Cross-Site Scripting via Widget Link To URL Patched CVE-2024-3667 7.4 Webbernaut June 4, 2024
Brizy – Page Builder <= 2.4.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Attributes Patched CVE-2024-1161 6.4 wesley (wcraft) June 4, 2024
Brizy – Page Builder <= 2.4.43 - Missing Authorization Patched CVE-2024-3711 4.3 Lucio Sá May 22, 2024
Brizy – Page Builder <= 2.4.41 - Authenticated(Contributor+) Stored Cross-Site Scripting Patched CVE-2024-1940 7.1 stealthcopter May 6, 2024
Brizy – Page Builder <= 2.4.39 - Authenticated (Contributor+) Directory Traversal Patched CVE-2024-1165 4.3 wesley (wcraft) February 23, 2024
Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2024-1293 6.4 Nikolas February 23, 2024
Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2024-1296 6.4 stealthcopter February 23, 2024
Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2024-1291 6.4 0liveira February 23, 2024
Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Arbitrary File Upload Patched CVE-2024-1311 8.8 stealthcopter February 23, 2024
Brizy <= 2.4.29 - Cross-Site Scripting Patched CVE-2023-51396 6.4 emad November 6, 2023
Brizy Page Builder <= 2.4.18 - IP Address Spoofing to Protection Mechanism Bypass Patched CVE-2023-2897 3.7 Alex Thomas May 31, 2023
Brizy Page Builder <= 2.4.1 - Authenticated Stored Cross-Site Scripting via Element Content Patched CVE-2022-2041 5.4 Vishnupriya Ilango June 21, 2022
Brizy Page Builder <= 2.4.1 - Authenticated Stored Cross-Site Scripting via Element URL Patched CVE-2022-2040 5.4 Vishnupriya Ilango June 21, 2022
Brizy Page Builder <= 2.3.11 - Authenticated File Upload and Path Traversal Patched CVE-2021-38346 8.8 Ram October 13, 2021
Brizy - Page Builder <= 2.3.11 - Stored Cross-Site Scripting Patched CVE-2021-38344 6.4 Ram October 13, 2021

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation