Skip to content
Noroxi

Brizy – Page Builder

brizy · plugin

Known security vulnerabilities for Brizy – Page Builder. Find out in seconds which version runs on your site with WP Lens.

24 known vulnerabilities

latest May 2, 2026

Vulnerabilities

  • CVE-2024-10960

    Brizy – Page Builder <= 2.6.4 - Authenticated (Contributor+) Arbitrary File Upload via storeUploads

    High 8.8

  • CVE-2024-3242

    Brizy – Page Builder <= 2.4.44 - Authenticated (Contributor+) Arbitrary File Upload

    High 8.8

  • CVE-2024-1311

    Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Arbitrary File Upload

    High 8.8

  • CVE-2026-5324

    Brizy – Page Builder <= 2.8.11 - Unauthenticated Stored Cross-Site Scripting via FileUpload Field Value

    High 7.2

  • CVE-2025-0969

    Brizy – Page Builder <= 2.7.16 - Authenticated (Contributor+) Sensitive Information Exposure via get_users Function

    Medium 6.5

  • CVE-2024-1937

    Brizy – Page Builder <= 2.4.44 - Missing Authorization to Authenticated (Contributor+) Post Modification

    Medium 6.5

  • CVE-2024-1165

    Brizy – Page Builder <= 2.4.39 - Authenticated (Contributor+) Directory Traversal

    Medium 6.5

  • CVE-2024-6254

    Brizy – Page Builder <= 2.5.1 - Cross-Site Request Forgery

    Medium 6.1

  • CVE-2024-2087

    Brizy – Page Builder <= 2.4.43 - Unauthenticated Stored Cross-Site Scripting via Form

    Medium 6.1

  • CVE-2025-32198

    WordPress Brizy plugin <= 2.7.7 - Cross Site Scripting (XSS) vulnerability

    Medium 5.4

  • CVE-2024-10322

    Brizy – Page Builder <= 2.6.8 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

    Medium 5.4

  • CVE-2024-1164

    Brizy – Page Builder <= 2.4.43 - Authenticated(Contributor+) Stored Cross-Site Scripting via Form Functionality

    Medium 5.4

  • CVE-2024-3667

    Brizy – Page Builder <= 2.4.43 - Authenticated (Contributor+) Store Cross-Site Scripting via Widget Link To URL

    Medium 5.4

  • CVE-2024-1940

    Brizy – Page Builder <= 2.4.41 - Authenticated(Contributor+) Stored Cross-Site Scripting

    Medium 5.4

  • CVE-2024-1161

    Brizy – Page Builder <= 2.4.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Attributes

    Medium 5.4

  • CVE-2024-1296

    Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scripting

    Medium 5.4

  • CVE-2024-1293

    Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scripting

    Medium 5.4

  • CVE-2024-1291

    Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scripting

    Medium 5.4

  • CVE-2023-51396

    WordPress Brizy – Page Builder Plugin <= 2.4.29 is vulnerable to Cross Site Scripting (XSS)

    Medium 5.4

  • CVE-2025-4370

    Brizy <= 2.6.20 - Missing Authorization to Unauthenticated Limited File Upload

    Medium 5.3

  • CVE-2023-2897

    Brizy Page Builder <= 2.4.18 - IP Address Spoofing to Protection Mechanism Bypass

    Medium 5.3

  • CVE-2026-32408

    WordPress Brizy plugin <= 2.7.23 - Broken Access Control vulnerability

    Medium 4.3

  • CVE-2025-58594

    WordPress Brizy Plugin <= 2.7.12 - Broken Access Control Vulnerability

    Medium 4.3

  • CVE-2024-3711

    Brizy – Page Builder <= 2.4.43 - Missing Authorization

    Medium 4.3

← Back to directory