CVE-2026-14882

The Brizy – Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'brizy-compiled-sections' parameter in all versions up to, and including, 2.8.18 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-14882

The Brizy – Page Builder plugin for WordPress, versions up to and including 2.8.18 , is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is insufficient input sanitization and output escaping regarding the 'brizy-compiled-sections' parameter. This allows authenticated attackers wi...