Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
patchstackRamuel Gall (WordFence)PATCHSTACK:79FA332D4DD24B6DE4D3F9AE2CA06318
HistoryOct 13, 2021 - 12:00 a.m.

WordPress Brizy – Page Builder plugin <= 2.3.11 - Incorrect authorization checks allowing Post modification vulnerability

2021-10-1300:00:00
Ramuel Gall (WordFence)
patchstack.com
5

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

JSON

Incorrect authorization checks allowing Post modification vulnerability discovered by Ramuel Gall (WordFence) in WordPress Brizy – Page Builder plugin (versions <= 2.3.11).

Solution

           Update the WordPress Brizy – Page Builder plugin to the latest available version (at least 2.3.12).
CPENameOperatorVersion
brizy – page builderle2.3.11

Related

wpvulndb 1
prion 1
cve 1
wordfence 1
threatpost 1
wpvulndb
wpvulndb
Brizy 1.0.127 - 2.3.11 - Incorrect Authorization to Post Modification
2021-10-13 00:00:00
prion
prion
Authorization
2021-10-14 16:15:00
cve
cve
CVE-2021-38345
2021-10-14 16:15:00
wordfence
wordfence
Multiple Vulnerabilities in Brizy Page Builder Plugin Allow Site Takeover
2021-10-13 14:00:27
threatpost
threatpost
Brizy WordPress Plugin Exploit Chains Allow Full Site Takeovers
2021-10-13 16:05:49

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

JSON
Related for PATCHSTACK:79FA332D4DD24B6DE4D3F9AE2CA06318
wpvulndb1prion1cve1wordfence1threatpost1