Brizy
themefusecom
Developer
2.8.23
Latest version
60,000
Installations
No date
Last updated
Vulnerability history
0 present
38 patched
7 Mitigation rules
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 2.8.184 days ago
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 2.8.1417/09/2026
- WordPress Brizy - Page Builder plugin < 2.8.19 - Contributor+ Template Type Update via IDOR vulnerability< 2.8.1926/08/2026
- WordPress Brizy - Page Builder plugin < 2.8.19 - Author+ Stored XSS via brizy_set_project Global Project Code Asset vulnerability< 2.8.1919/08/2026
- WordPress Brizy - Page Builder plugin < 2.8.19 - Contributor+ Stored XSS via Featured Image Focal Point vulnerability< 2.8.1919/08/2026
- Contributor+ Sensitive Information Disclosure vulnerability< 2.8.1801/08/2026
- Unauthenticated Stored Cross-Site Scripting vulnerability<= 2.8.1106/05/2026
- Broken Access Control vulnerability<= 2.7.2322/02/2026
- Authenticated(Contributor+) Stored Cross-Site Scripting via Form Functionality vulnerability<= 2.4.4303/02/2026
- WordPress Brizy - Page Builder plugin <= 2.4.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Attributes vulnerability<= 2.4.4303/02/2026
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 2.4.4003/02/2026
- WordPress Brizy - Page Builder plugin <= 2.4.41 - Authenticated(Contributor+) Stored Cross-Site Scripting vulnerability<= 2.4.4102/02/2026
- Authenticated (Contributor+) Sensitive Information Exposure via get_users Function vulnerability<= 2.7.1613/12/2025
- Broken Access Control Vulnerability<= 2.7.1203/09/2025
- Missing Authorization to Unauthenticated Limited File Upload vulnerability<= 2.6.2028/07/2025
- Cross Site Scripting (XSS) vulnerability<= 2.7.704/04/2025
- Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload vulnerability<= 2.6.812/02/2025
- Authenticated (Contributor+) Arbitrary File Upload via storeUploads vulnerability<= 2.6.412/02/2025
- Cross-Site Request Forgery vulnerability<= 2.5.108/08/2024
- Authenticated (Contributor+) Arbitrary File Upload vulnerability<= 2.4.4418/07/2024
- Missing Authorization to Authenticated (Contributor+) Post Modification vulnerability<= 2.4.4416/07/2024
- Multiple Authenticated (Contributor+) Store Cross-Site Scripting vulnerability<= 2.4.4305/06/2024
- Unauthenticated Stored Cross-Site Scripting via Form vulnerability<= 2.4.4305/06/2024
- Missing Authorization vulnerability<= 2.4.4323/05/2024
- Authenticated (Contributor+) Directory Traversal vulnerability<= 2.4.4026/02/2024
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 2.4.4026/02/2024
- Authenticated (Contributor+) Arbitrary File Upload vulnerability<= 2.4.4026/02/2024
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 2.4.4026/02/2024
- Cross Site Scripting (XSS) vulnerability<= 2.4.2926/12/2023
- Cross-Site Scripting vulnerability< 2.4.3009/11/2023
- IP Address Spoofing to Protection Mechanism Bypass vulnerability<= 2.4.1831/05/2023
- Authenticated Stored Cross-Site Scripting (XSS) vulnerability via Element URL<= 2.4.121/06/2022
- Authenticated Stored Cross-Site Scripting (XSS) via Element Content<= 2.4.121/06/2022
- Incorrect authorization checks allowing Post modification vulnerability<= 2.3.1113/10/2021
- Authenticated Stored Cross-Site Scripting (XSS) vulnerability<= 2.3.1113/10/2021
- Authenticated File Upload and Path Traversal vulnerability<= 2.3.1113/10/2021
- Broken Access Control vulnerability<= 1.0.12510/06/2020
- Unauthenticated Site Settings Update vulnerability<= 1.0.11305/03/2020