Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

31 matches found

CVE
CVE•added 14 hours ago•7 views

CVE-2026-11882

The Builderall for WordPress plugin (pre-3.0.2) has an OAuth flaw where the state value from public OAuth routes is not bound to the initiating user session. This allows unauthenticated attackers to complete the OAuth connection flow and overwrite the stored third‑party integration access token. ...

5.3AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB•added 14 hours ago•3 views

CVE-2026-11882

The Builderall for WordPress plugin before 3.0.2 does not bind the state value of its public OAuth authentication routes to the initiating user session, allowing unauthenticated attackers to complete the connection flow and overwrite the stored third-party integration access token. A durable...

5.3AI score
SaveExploits0References1
RedhatCVE
RedhatCVE•added 2026/03/06 7:53 a.m.•7 views

CVE-2026-22390

Improper Control of Generation of Code 'Code Injection' vulnerability in Builderall Builderall Builder for WordPress builderall-cheetah-for-wp allows Code Injection.This issue affects Builderall Builder for WordPress: from n/a through = 3.0.1...

9.9CVSS5.8AI score0.00469EPSS
SaveExploits0References1
EUVD
EUVD•added 2026/03/05 6:30 a.m.•6 views

EUVD-2026-9531

Improper Control of Generation of Code 'Code Injection' vulnerability in Builderall Builderall Builder for WordPress builderall-cheetah-for-wp allows Code Injection.This issue affects Builderall Builder for WordPress: from n/a through = 3.0.1...

6AI score0.00469EPSS
SaveExploits0References2
NVD
NVD•added 2026/03/05 6:16 a.m.•7 views

CVE-2026-22390

Improper Control of Generation of Code 'Code Injection' vulnerability in Builderall Builderall Builder for WordPress builderall-cheetah-for-wp allows Code Injection.This issue affects Builderall Builder for WordPress: from n/a through = 3.0.1...

9.9CVSS0.00469EPSS
SaveExploits0References1
CVE
CVE•added 2026/03/05 5:53 a.m.•20 views

CVE-2026-22390

CVE-2026-22390 affects Builderall Builder for WordPress (plugin: builderall-cheetah-for-wp) up to version 3.0.1 and permits Code Injection/Remote Code Execution. The NVD entry reports a CVSS v3.1 base score of 9.9 (CRITICAL) with Network attack vector, Low attack complexity, Privileges Required: ...

9.9CVSS6AI score0.00469EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2026/03/05 5:53 a.m.•29 views

CVE-2026-22390 WordPress Builderall Builder for WordPress plugin <= 3.0.1 - Remote Code Execution (RCE) vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in Builderall Builderall Builder for WordPress builderall-cheetah-for-wp allows Code Injection.This issue affects Builderall Builder for WordPress: from n/a through = 3.0.1...

9.9CVSS0.00469EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment•added 2026/03/05 5:53 a.m.•3 views

CVE-2026-22390 WordPress Builderall Builder for WordPress plugin <= 3.0.1 - Remote Code Execution (RCE) vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in Builderall Builderall Builder for WordPress builderall-cheetah-for-wp allows Code Injection.This issue affects Builderall Builder for WordPress: from n/a through = 3.0.1...

5.8AI score0.00469EPSS
SaveExploits0References1
CNNVD
CNNVD•added 2026/03/05 12:0 a.m.•17 views

WordPress plugin Builderall Builder for WordPress 代码注入漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that extends the...

9.9CVSS5.9AI score0.00469EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies•added 2026/03/05 12:0 a.m.•10 views

PT-2026-23152

Name of the Vulnerable Software and Affected Versions Builderall Builder for WordPress versions through 3.0.1 Description The software contains a flaw related to improper control of code generation, potentially allowing code injection. The issue exists in Builderall Builder for WordPress...

5.9AI score0.00469EPSS
SaveExploits0References3
Patchstack
Patchstack•added 2026/02/25 11:39 a.m.•8 views

WordPress Builderall Builder for WordPress plugin <= 3.0.1 - Remote Code Execution (RCE) vulnerability

Remote Code Execution RCE vulnerability discovered by Doan Dinh Van in WordPress Plugin Builderall Builder for WordPress versions = 3.0.1...

9.9CVSS6AI score0.00469EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE•added 2025/10/28 2:38 a.m.•15 views

CVE-2025-62987

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Builderall Builderall Builder for WordPress builderall-cheetah-for-wp allows Stored XSS.This issue affects Builderall Builder for WordPress: from n/a through = 3.0.1...

6.5CVSS5.9AI score0.00154EPSS
SaveExploits0References1
EUVD
EUVD•added 2025/10/27 3:30 a.m.•4 views

EUVD-2025-35958

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Builderall Builderall Builder for WordPress builderall-cheetah-for-wp allows Stored XSS.This issue affects Builderall Builder for WordPress: from n/a through = 3.0.1...

6.5CVSS5.5AI score0.00154EPSS
SaveExploits0References2
NVD
NVD•added 2025/10/27 2:15 a.m.•3 views

CVE-2025-62987

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Builderall Builderall Builder for WordPress builderall-cheetah-for-wp allows Stored XSS.This issue affects Builderall Builder for WordPress: from n/a through = 3.0.1...

6.5CVSS0.00154EPSS
SaveExploits0References1
CVE
CVE•added 2025/10/27 1:34 a.m.•14 views

CVE-2025-62987

CVE-2025-62987 corresponds to a Stored XSS in Builderall Builder for WordPress (builderall-cheetah-for-wp) via improper input neutralization. Affected: Builderall Builder for WordPress plugin up to version 3.0.1 (inclusive). Root cause: improper neutralization of input during web page generation....

6.5CVSS5.6AI score0.00154EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2025/10/27 1:34 a.m.•11 views

CVE-2025-62987 WordPress Builderall Builder for WordPress plugin <= 3.0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Builderall Builderall Builder for WordPress builderall-cheetah-for-wp allows Stored XSS.This issue affects Builderall Builder for WordPress: from n/a through = 3.0.1...

6.5CVSS0.00154EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment•added 2025/10/27 1:34 a.m.•3 views

CVE-2025-62987 WordPress Builderall Builder for WordPress plugin <= 3.0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Builderall Builderall Builder for WordPress builderall-cheetah-for-wp allows Stored XSS.This issue affects Builderall Builder for WordPress: from n/a through = 3.0.1...

6.5CVSS5.6AI score0.00154EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies•added 2025/10/27 12:0 a.m.•6 views

PT-2025-43859

Name of the Vulnerable Software and Affected Versions Builderall Builder for WordPress versions through 3.0.1 Description The software contains an Improper Neutralization of Input During Web Page Generation issue, leading to a Stored Cross-site Scripting XSS condition. This allows for the injecti...

6.5CVSS5.5AI score0.00154EPSS
SaveExploits0References3
CNNVD
CNNVD•added 2025/10/27 12:0 a.m.•5 views

WordPress plugin Builderall Builder for WordPress 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

6.5CVSS5.8AI score0.00154EPSS
SaveExploits0References1
Patchstack
Patchstack•added 2025/10/23 3:40 a.m.•9 views

WordPress Builderall Builder for WordPress plugin <= 3.0.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Builderall Builder for WordPress versions = 3.0.1...

6.5CVSS6.1AI score0.00154EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder