Lucene search
+L

8 matches found

NVD
NVD
added 2024/05/17 9:15 a.m.23 views

CVE-2023-51398

Improper Privilege Management vulnerability in Brainstorm Force Ultimate Addons for Beaver Builder allows Privilege Escalation.This issue affects Ultimate Addons for Beaver Builder: from n/a through 1.35.14...

8.8CVSS8.8AI score0.00547EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/05/17 8:40 a.m.32 views

CVE-2023-51398 WordPress Ultimate Addons for Beaver Builder Premium plugin <= 1.35.14 - Privilege Escalation vulnerability

Improper Privilege Management vulnerability in Brainstorm Force Ultimate Addons for Beaver Builder allows Privilege Escalation.This issue affects Ultimate Addons for Beaver Builder: from n/a through 1.35.14...

8.8CVSS8.8AI score0.00547EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/03/30 6:44 a.m.31 views

CVE-2024-2140 Ultimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Icons Widget

The Ultimate Addons for Beaver Builder – Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Advanced Icons widget in all versions up to, and including, 1.5.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...

6.4CVSS5.8AI score0.0034EPSS
SaveExploits0References2
CVE
CVE
added 2024/03/30 6:44 a.m.74 views

CVE-2024-2144

CVE-2024-2144 affects the Ultimate Addons for Beaver Builder – Lite plugin for WordPress. The issue is a Stored Cross-Site Scripting vulnerability in the Image Separator widget, exploitable by authenticated users with contributor-level access or higher, allowing injection of scripts that execute ...

6.4CVSS7.6AI score0.0043EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2024/03/30 6:44 a.m.70 views

CVE-2024-2143

CVE-2024-2143 affects the Ultimate Addons for Beaver Builder – Lite WordPress plugin. It enables Stored XSS via the Heading widget in all versions up to 1.5.7 due to insufficient input sanitization and output escaping. Exploitation requires authenticated access at contributor level or higher, all...

6.4CVSS7.6AI score0.0034EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2024/03/30 12:00 a.m.9 views

WordPress Plugin Ultimate Addons for Beaver Builder 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

6.4CVSS7.7AI score0.0034EPSS
SaveExploits0References3
NVD
NVD
added 2024/01/17 5:15 p.m.29 views

CVE-2023-23882

Missing Authorization vulnerability in Brainstorm Force Ultimate Addons for Beaver Builder – Lite.This issue affects Ultimate Addons for Beaver Builder – Lite: from n/a through 1.5.5...

4.3CVSS4.7AI score0.00321EPSS
SaveExploits0References1
CVE
CVE
added 2024/01/17 4:44 p.m.50 views

CVE-2023-23882

The CVE-2023-23882 entry refers to a Missing Authorization (Broken Access Control) vulnerability in WordPress Ultimate Addons for Beaver Builder – Lite. According to Patchstack (and other connected entries), affected versions are Ultimate Addons for Beaver Builder – Lite 1.5.5 (i.e., 1.5.6 or ne...

4.3CVSS4.9AI score0.00321EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder