Unyson < 2.7.27 - Cross Site Scripting

The plugin does not sanitise and escape the QUERYSTRING before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting in browsers which do not encode characters id: CVE-2022-2219 info: name: Unyson 2.7.27 - Cross Site Scripting author: r3Y3r53 severity: high description:...

CVE-2026-112830

Missing Authorization vulnerability in Brizy Brizy brizy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Brizy: from n/a through 2.8.25...

CVE-2026-112830 WordPress Brizy plugin <= 2.8.25 - Broken Access Control vulnerability

Missing Authorization vulnerability in Brizy Brizy brizy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Brizy: from n/a through 2.8.25...

EUVD-2026-125290

Missing Authorization vulnerability in Brizy Brizy brizy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Brizy: from n/a through 2.8.25...

CVE-2026-112830

The Brizy WordPress plugin (versions

WordPress Brizy plugin <= 2.8.25 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Charles Vosburgh in WordPress Plugin Brizy versions = 2.8.25...

PT-2026-146834

Missing Authorization vulnerability in Brizy Brizy brizy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Brizy: from n/a through 2.8.25...

CVE-2026-111844

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brizy Brizy brizy allows Stored XSS.This issue affects Brizy: 2.8.23...

CVE-2026-111844 WordPress Brizy plugin 2.8.23 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brizy Brizy brizy allows Stored XSS.This issue affects Brizy: 2.8.23...

EUVD-2026-104878

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brizy Brizy brizy allows Stored XSS.This issue affects Brizy: 2.8.23...

CVE-2026-111844 WordPress Brizy plugin 2.8.23 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brizy Brizy brizy allows Stored XSS.This issue affects Brizy: 2.8.23...

CVE-2026-111844

The WordPress Brizy plugin version 2.8.23 is vulnerable to a Stored Cross-Site Scripting (XSS) vulnerability. The flaw stems from the improper neutralization of input during web page generation . This vulnerability allows an attacker to execute malicious scripts in the context of a user's browser...

WordPress Brizy plugin 2.8.23 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ayukiab in WordPress Plugin Brizy versions 2.8.23...

PT-2026-118300

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brizy Brizy brizy allows Stored XSS.This issue affects Brizy: 2.8.23...

WordPress Brizy Cross-Site Script Vulnerability

WordPress Brizy 2.8.23 has a cross-site scripting vulnerability, which stems from improper input during web page generation. This vulnerability may lead to storage-based cross-site scripting attacks...

VulnCheck KEV: CVE-2024-2087

The Brizy – Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form name values in all versions up to, and including, 2.4.43 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

VulnCheck KEV: CVE-2024-3242

The Brizy – Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file extension validation in the validateImageContent function called via storeImages in all versions up to, and including, 2.4.43. This makes it possible for authenticated attackers, with...

VulnCheck KEV: CVE-2026-5324

The Brizy – Page Builder plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting in all versions up to, and including, 2.8.11 This is due to a combination of missing nonce verification for unauthenticated form submissions, insufficient handling of FileUpload fields when ...

CVE-2026-14882

The Brizy – Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'brizy-compiled-sections' parameter in all versions up to, and including, 2.8.18 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-14882 Brizy <= 2.8.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'brizy-compiled-sections' Post Meta

The Brizy – Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'brizy-compiled-sections' parameter in all versions up to, and including, 2.8.18 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...