Lucene search
+L

52 matches found

CVE
CVE
added 2024/05/22 7:37 a.m.57 views

CVE-2024-2163

CVE-2024-2163 affects Ninja Beaver Add-ons for Beaver Builder (WordPress). The issue is stored Cross-Site Scripting via widget attributes (e.g., URLs) in the plugin’s widgets. It is exploitable by authenticated attackers with contributor-level permissions and above, allowing arbitrary scripts to ...

6.4CVSS6AI score0.00267EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/03/30 12:0 a.m.5 views

WordPress Plugin Ultimate Addons for Beaver Builder 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

6.4CVSS7.7AI score0.00343EPSS
SaveExploits0References3
OSV
OSV
added 2024/03/13 4:15 p.m.7 views

CVE-2024-1080

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the via the heading tag in all versions up to, and including, 2.7.4.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...

5.4CVSS5.9AI score0.00409EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/03/13 12:0 a.m.6 views

WordPress Plugin Beaver Builder Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

6.1CVSS6.8AI score0.00592EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/03/13 12:0 a.m.4 views

WordPress Plugin Beaver Builder Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

6.4CVSS5.9AI score0.00532EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/03/13 12:0 a.m.4 views

WordPress Plugin Beaver Builder Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

6.4CVSS5.9AI score0.00406EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/03/13 12:0 a.m.7 views

WordPress Plugin Beaver Builder Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

5.4CVSS5.9AI score0.00399EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2023/12/26 12:0 a.m.8 views

WordPress Ultimate Addons for Beaver Builder Plugin <= 1.35.13 is vulnerable to Arbitrary File Download

Software Ultimate Addons for Beaver Builder Type Plugin Vulnerable versions = 1.35.13 Fixed in 1.35.14 OWASP Top 10 A1: Broken Access Control Classification Arbitrary File Download CVE CVE-2023-51401 Patch priority Low CVSS severity Low 6.3 Developer Claim ownership PSID 8fb95010e714 Credits Rafi...

6.5CVSS6.6AI score0.00562EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/10/20 12:0 a.m.10 views

The vulnerability of the “Media App” module implementation in the Beaver Builder plugin of the WordPress content management system allows a hacker to perform cross-site scripting attacks.

The vulnerability of the “Media App” module implementation in the Beaver Builder plugin of the WordPress content management system exists because measures are not taken to protect the structure of web pages when processing Image URLs. Exploiting this vulnerability allows a malicious actor to...

6.4CVSS5.6AI score0.00457EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/10/20 12:0 a.m.9 views

The vulnerability of the Beaver Builder plugin of the WordPress content management system, related to the lack of protective measures for website structures, allows attackers to carry out cross-site scripting attacks.

The vulnerability of the Beaver Builder plugin of the WordPress content management system exists due to the lack of protection for website structures when images with the “Caption – On Hover” property are used. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting...

6.4CVSS5.6AI score0.0045EPSS
SaveExploits0References5Affected Software1
NVD
NVD
added 2022/09/06 6:15 p.m.21 views

CVE-2022-36425

Broken Access Control vulnerability in Beaver Builder plugin = 2.5.4.3 at WordPress...

9.8CVSS0.00751EPSS
SaveExploits0References2
CVE
CVE
added 2022/09/06 5:18 p.m.70 views

CVE-2022-36425

CVE-2022-36425 describes a Broken Access Control issue in the Beaver Builder WordPress plugin, affecting versions

9.8CVSS7.4AI score0.00751EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder