Lucene search
+L

17558 matches found

RedhatCVE
RedhatCVE
•added 2026/01/09 8:58 a.m.•21 views

CVE-2023-45756

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Spider Teams ApplyOnline – Application Form Builder and Manager plugin = 2.5.2 versions...

7.1CVSS7.2AI score0.00527EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 8:35 a.m.•25 views

CVE-2024-34752

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in PluginOps Landing Page Builder allows Reflected XSS.This issue affects Landing Page Builder: from n/a through 1.5.1.8...

7.1CVSS6.8AI score0.00301EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/09 8:15 a.m.•20 views

CVE-2025-13753

The WP Table Builder – Drag & Drop Table Builder plugin for WordPress is vulnerable to unauthorized modification of data due to an incorrect authorization check on the savetable function in all versions up to, and including, 2.0.19. This makes it possible for authenticated attackers, with...

4.3CVSS0.00263EPSS
SaveExploits0References3
CVE
CVE
•added 2026/01/09 7:22 a.m.•32 views

CVE-2025-13753

CVE-2025-13753 refers to the WP Table Builder – Drag & Drop Table Builder plugin for WordPress. The issue is an incorrect authorization check on save_table() , enabling authenticated users with Subscriber+ privileges to create new wptb-table posts in versions up to and including 2.0.19. The Wordf...

4.3CVSS5.8AI score0.00263EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/01/09 7:22 a.m.•12 views

CVE-2025-13753 WP Table Builder <= 2.0.19 - Incorrect Authorization to Authenticated (Subscriber+) Arbitrary Table Creation

The WP Table Builder – Drag & Drop Table Builder plugin for WordPress is vulnerable to unauthorized modification of data due to an incorrect authorization check on the savetable function in all versions up to, and including, 2.0.19. This makes it possible for authenticated attackers, with...

4.3CVSS5.8AI score0.00263EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/01/09 12:00 a.m.•19 views

WordPress plugin WP Table Builder – Drag & Drop Table Builder security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

4.3CVSS5.8AI score0.00263EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/09 12:00 a.m.•11 views

CVE-2025-13753: Incorrect Authorization

The WP Table Builder – Drag & Drop Table Builder plugin for WordPress is vulnerable to unauthorized modification of data due to an incorrect authorization check on the savetable function in all versions up to, and including, 2.0.19. This makes it possible for authenticated attackers, with...

4.3CVSS5.8AI score0.00263EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/01/08 10:56 p.m.•25 views

WordPress WP Table Builder plugin <= 2.0.19 - Incorrect Authorization to Authenticated (Subscriber+) Arbitrary Table Creation vulnerability

Incorrect Authorization to Authenticated Subscriber+ Arbitrary Table Creation vulnerability discovered by Dmitrii Ignatyev - CleanTalk Inc in WordPress Plugin WP Table Builder versions = 2.0.19...

4.3CVSS7AI score0.00263EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2026/01/08 5:15 p.m.•22 views

CVE-2026-22488

Missing Authorization vulnerability in IdeaBox Creations Dashboard Welcome for Beaver Builder dashboard-welcome-for-beaver-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Dashboard Welcome for Beaver Builder: from n/a through = 1.0.8...

5.3CVSS0.00209EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/08 4:35 p.m.•10 views

CVE-2026-22488 WordPress Dashboard Welcome for Beaver Builder plugin <= 1.0.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in IdeaBox Creations Dashboard Welcome for Beaver Builder dashboard-welcome-for-beaver-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Dashboard Welcome for Beaver Builder: from n/a through = 1.0.8...

5.3CVSS6AI score0.00209EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/01/08 4:35 p.m.•54 views

CVE-2026-22488 WordPress Dashboard Welcome for Beaver Builder plugin <= 1.0.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in IdeaBox Creations Dashboard Welcome for Beaver Builder dashboard-welcome-for-beaver-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Dashboard Welcome for Beaver Builder: from n/a through = 1.0.8...

5.3CVSS0.00209EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/08 4:35 p.m.•34 views

CVE-2026-22488

CVE-2026-22488 affects Dashboard Welcome for Beaver Builder (WordPress). The Initial Description notes a Missing Authorization vulnerability allowing access due to incorrectly configured Access Control Security Levels, impacting Dashboard Welcome for Beaver Builder versions from n/a up to 1.0.8. ...

5.3CVSS6AI score0.00209EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/08 3:15 a.m.•24 views

CVE-2025-69345

Missing Authorization vulnerability in BoldGrid Post and Page Builder by BoldGrid post-and-page-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post and Page Builder by BoldGrid: from n/a through = 1.27.9...

4.3CVSS6.7AI score0.00181EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/08 3:14 a.m.•19 views

CVE-2025-30631

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AA-Team Woocommerce Sales Funnel Builder, AA-Team Amazon Affiliates Addon for WPBakery Page Builder formerly Visual Composer allows Reflected XSS.This issue affects Woocommerce Sales Funnel Builder...

7.1CVSS5.2AI score0.0018EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/01/08 12:31 a.m.•24 views

EUVD-2025-206259

The Report Builder component of the application stores user input directly in a web page and displays it to other users, which raised concerns about a possible Cross-Site Scripting XSS attack. Proper management of this functionality helps ensure a secure and seamless user experience. Although the...

1.8CVSS5.8AI score0.00178EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/01/08 12:00 a.m.•30 views

PT-2026-2190

Name of the Vulnerable Software and Affected Versions Dashboard Welcome for Beaver Builder versions through 1.0.8 Description An issue exists in Dashboard Welcome for Beaver Builder related to incorrectly configured access control security levels, allowing for missing authorization. The issue...

5.3CVSS6.6AI score0.00209EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/01/08 12:00 a.m.•22 views

WordPress Plugin Dashboard Welcome for Beaver Builder has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.3CVSS5.8AI score0.00209EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/08 12:00 a.m.•7 views

CVE-2026-22488: Missing Authorization

Missing Authorization vulnerability in IdeaBox Creations Dashboard Welcome for Beaver Builder dashboard-welcome-for-beaver-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Dashboard Welcome for Beaver Builder: from n/a through = 1.0.8...

5.3CVSS6AI score0.00209EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2026/01/07 10:15 p.m.•22 views

CVE-2025-12776

The Report Builder component of the application stores user input directly in a web page and displays it to other users, which raised concerns about a possible Cross-Site Scripting XSS attack. Proper management of this functionality helps ensure a secure and seamless user experience. Although the...

5.4CVSS5.8AI score0.00178EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/07 10:15 p.m.•27 views

CVE-2025-12776

The Report Builder component of the application stores user input directly in a web page and displays it to other users, which raised concerns about a possible Cross-Site Scripting XSS attack. Proper management of this functionality helps ensure a secure and seamless user experience. Although the...

5.4CVSS0.00178EPSS
SaveExploits0References1
Rows per page
Query Builder