Themes Vulnerabilities

Builder Theme < 1.4.1 - PrettyPhoto DOM Cross-Site Scripting (XSS)

Description

The builder WordPress theme was affected by a PrettyPhoto DOM Cross-Site Scripting (XSS) security vulnerability.

Affects Themes

builder
Fixed in 1.4.1

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
ae34143a-b1e9-428d-b41c-3619914f928e

Timeline

Publicly Published
2015-08-03 (about 10 years ago)
Added
2015-08-03 (about 10 years ago)
Last Updated
2020-03-03 (about 6 years ago)

Other

Published
Title
Published
2025-03-28
Title
Toggle Box <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2023-12-05
Title
Structured Content < 1.6 - Contributor+ Stored XSS
Published
2025-09-01
Title
ProfileGrid – User Profiles, Groups and Communities < 5.9.5.8 - Reflected Cross-Site Scripting
Published
2024-10-16
Title
Countdown Timer <= 1.0.5 - Contributor+ Stored XSS
Published
2025-09-22
Title
Upsell Order Bump Offer for WooCommerce < 3.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting