Brizy
themefusecom
Developer
2.7.19
Latest version
70,000
Installations
No date
Last updated
Vulnerability history
0 present
26 fixed
6 Mitigation rules
- Authenticated (Contributor+) Sensitive Information Exposure via get_users Function vulnerability<= 2.7.165 hours ago
- Broken Access Control Vulnerability<= 2.7.12Sep 3, 2025
- Missing Authorization to Unauthenticated Limited File Upload vulnerability<= 2.6.20Jul 28, 2025
- Cross Site Scripting (XSS) vulnerability<= 2.7.7Apr 4, 2025
- Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload vulnerability<= 2.6.8Feb 12, 2025
- Authenticated (Contributor+) Arbitrary File Upload via storeUploads vulnerability<= 2.6.4Feb 12, 2025
- Cross-Site Request Forgery vulnerability<= 2.5.1Aug 8, 2024
- Authenticated (Contributor+) Arbitrary File Upload vulnerability<= 2.4.44Jul 18, 2024
- Missing Authorization to Authenticated (Contributor+) Post Modification vulnerability<= 2.4.44Jul 16, 2024
- Multiple Authenticated (Contributor+) Store Cross-Site Scripting vulnerability<= 2.4.43Jun 5, 2024
- Unauthenticated Stored Cross-Site Scripting via Form vulnerability<= 2.4.43Jun 5, 2024
- Missing Authorization vulnerability<= 2.4.43May 23, 2024
- Authenticated (Contributor+) Directory Traversal vulnerability<= 2.4.40Feb 26, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 2.4.40Feb 26, 2024
- Authenticated (Contributor+) Arbitrary File Upload vulnerability<= 2.4.40Feb 26, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 2.4.40Feb 26, 2024
- Cross Site Scripting (XSS) vulnerability<= 2.4.29Dec 26, 2023
- Cross-Site Scripting vulnerability< 2.4.30Nov 9, 2023
- IP Address Spoofing to Protection Mechanism Bypass vulnerability<= 2.4.18May 31, 2023
- Authenticated Stored Cross-Site Scripting (XSS) vulnerability via Element URL<= 2.4.1Jun 21, 2022
- Authenticated Stored Cross-Site Scripting (XSS) via Element Content<= 2.4.1Jun 21, 2022
- Incorrect authorization checks allowing Post modification vulnerability<= 2.3.11Oct 13, 2021
- Authenticated Stored Cross-Site Scripting (XSS) vulnerability<= 2.3.11Oct 13, 2021
- Authenticated File Upload and Path Traversal vulnerability<= 2.3.11Oct 13, 2021
- Broken Access Control vulnerability<= 1.0.125Jun 10, 2020
- Unauthenticated Site Settings Update vulnerability<= 1.0.113Mar 5, 2020