Plugin icon

Brizy – Page Builder

brizy

Vulnerabilities:

30

Last Updated:

May 5, 2026

Active Installs:

70000

Published
Title
Fixed in
CVSS
Published
2026-05-01
Title
Brizy – Page Builder < 2.8.12 - Unauthenticated Stored Cross-Site Scripting via FileUpload Field Value
Fixed in
Fixed in 2.8.12
CVSS
7.2 (high)
Published
2026-02-22
Title
Brizy < 2.7.24 - Missing Authorization
Fixed in
Fixed in 2.7.24
CVSS
4.3 (medium)
Published
2025-12-12
Title
Brizy – Page Builder < 2.7.17 - Contributor+ Sensitive Information Exposure
Fixed in
Fixed in 2.7.17
CVSS
6.5 (medium)
Published
2025-09-03
Title
Brizy < 2.7.13 - Missing Authorization
Fixed in
Fixed in 2.7.13
CVSS
4.3 (medium)
Published
2025-07-28
Title
Brizy < 2.6.21 - Missing Authorization to Unauthenticated Limited File Upload
Fixed in
Fixed in 2.6.21
CVSS
5.3 (medium)
Published
2025-04-04
Title
Brizy < 2.7.8 - Contributor+ Stored XSS
Fixed in
Fixed in 2.7.8
CVSS
5.9 (medium)
Published
2025-02-12
Title
Brizy – Page Builder < 2.6.9 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Fixed in
Fixed in 2.6.9
CVSS
6.4 (medium)
Published
2025-02-11
Title
Brizy – Page Builder < 2.6.5 - Authenticated (Contributor+) Arbitrary File Upload via storeUploads
Fixed in
Fixed in 2.6.5
CVSS
9.9 (critical)
Published
2024-08-07
Title
Brizy – Page Builder < 2.5.2 - Cross-Site Request Forgery
Fixed in
Fixed in 2.5.2
CVSS
4.3 (medium)
Published
2024-07-17
Title
Brizy – Page Builder < 2.4.45 - Authenticated (Contributor+) Arbitrary File Upload
Fixed in
Fixed in 2.4.45
CVSS
8.8 (high)
Published
2024-07-15
Title
Brizy – Page Builder < 2.4.45 - Missing Authorization to Authenticated (Contributor+) Post Modification
Fixed in
Fixed in 2.4.45
CVSS
7.1 (high)
Published
2024-06-04
Title
Brizy – Page Builder < 2.4.44 - Authenticated(Contributor+) Stored Cross-Site Scripting via Form Functionality
Fixed in
Fixed in 2.4.44
CVSS
6.4 (medium)
Published
2024-06-04
Title
Brizy – Page Builder < 2.4.44 - Unauthenticated Stored Cross-Site Scripting via Form
Fixed in
Fixed in 2.4.44
CVSS
7.2 (high)
Published
2024-06-04
Title
Brizy – Page Builder < 2.4.44 - Authenticated (Contributor+) Store Cross-Site Scripting via Widget Link To URL
Fixed in
Fixed in 2.4.44
CVSS
7.4 (high)
Published
2024-06-04
Title
Brizy – Page Builder < 2.4.44 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Attributes
Fixed in
Fixed in 2.4.44
CVSS
6.4 (medium)
Published
2024-05-22
Title
Brizy – Page Builder < 2.4.44 - Missing Authorization
Fixed in
Fixed in 2.4.44
CVSS
4.3 (medium)
Published
2024-05-06
Title
Brizy – Page Builder < 2.4.42 - Authenticated(Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.4.42
CVSS
7.1 (high)
Published
2024-02-23
Title
Brizy – Page Builder < 2.4.41 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.4.41
CVSS
6.4 (medium)
Published
2024-02-23
Title
Brizy – Page Builder < 2.4.41 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.4.41
CVSS
6.4 (medium)
Published
2024-02-23
Title
Brizy – Page Builder < 2.4.41 - Authenticated (Contributor+) Directory Traversal
Fixed in
Fixed in 2.4.41
CVSS
4.3 (medium)
Published
2024-02-23
Title
Brizy – Page Builder < 2.4.41 - Authenticated (Contributor+) Arbitrary File Upload
Fixed in
Fixed in 2.4.41
CVSS
8.8 (high)
Published
2024-02-23
Title
Brizy – Page Builder < 2.4.41 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.4.41
CVSS
6.4 (medium)
Published
2023-11-06
Title
Brizy < 2.4.30 - Contributor+ Stored XSS
Fixed in
Fixed in 2.4.30
CVSS
5.9 (medium)
Published
2022-06-21
Title
Brizy Page Builder < 2.4.2 - Contributor+ Stored Cross-Site Scripting via Element URL
Fixed in
Fixed in 2.4.2
CVSS
6.8 (medium)
Published
2022-06-21
Title
Brizy Page Builder < 2.4.2 - Contributor+ Stored Cross-Site Scripting via Element Content
Fixed in
Fixed in 2.4.2
CVSS
6.8 (medium)
Published
2021-10-13
Title
Brizy < 2.3.12 - Authenticated Stored Cross-Site Scripting
Fixed in
Fixed in 2.3.12
CVSS
6.4 (medium)
Published
2021-10-13
Title
Brizy 1.0.127 - 2.3.11 - Incorrect Authorization to Post Modification
Fixed in
Fixed in 2.3.12
CVSS
7.1 (high)
Published
2021-10-13
Title
Brizy < 2.3.12 - Authenticated File Upload and Path Traversal
Fixed in
Fixed in 2.3.12
CVSS
8.8 (high)
Published
2020-06-10
Title
Brizy - Page Builder < 1.0.126 - Improper Access Controls on AJAX Calls
Fixed in
Fixed in 1.0.126
CVSS
8.3 (high)
Published
2020-03-05
Title
Brizy - Page Builder < 1.0.114 - Unauthenticated Site Settings Update
Fixed in
Fixed in 1.0.114
CVSS
n/a