WordPress Bold Page Builder Plugin <= 4.8.0 is vulnerable to Cross Site Scripting (XSS)

Software Bold Page Builder Type Plugin Vulnerable versions = 4.8.0 Fixed in 4.8.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-30442 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 88e9753be091 Credits savphill Required privilege...

WordPress Beaver Builder Plugin <= 2.7.4.4 is vulnerable to Cross Site Scripting (XSS)

Software Beaver Builder Type Plugin Vulnerable versions = 2.7.4.4 Fixed in 2.7.4.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-30425 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID c615d50619b7 Credits Khalid Yusuf Require...

WordPress Beaver Builder Addons by WPZOOM Plugin <= 1.3.4 is vulnerable to Cross Site Scripting (XSS)

Software Beaver Builder Addons by WPZOOM Type Plugin Vulnerable versions = 1.3.4 Fixed in 1.3.5 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-30424 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID e8570b0b8002 Credits Khalid Yusuf Required...

WordPress Brave Popup Builder Plugin <= 0.6.5 is vulnerable to Server Side Request Forgery (SSRF)

Software Brave Popup Builder Type Plugin Vulnerable versions = 0.6.5 Fixed in 0.6.6 OWASP Top 10 A10: Server-Side Request Forgery SSRF Classification Server Side Request Forgery SSRF CVE CVE-2024-30453 Patch priority Medium CVSS severity Medium 5.4 Developer Claim ownership PSID 8769cfe45747...

WordPress RT Easy Builder – Advanced addons for Elementor Plugin <= 2.0 is vulnerable to Broken Access Control

Software RT Easy Builder – Advanced addons for Elementor Type Plugin Vulnerable versions = 2.0 Fixed in 2.1 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-30484 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 63af1e863062 Credits...

CVE-2023-39311

Cross-Site Request Forgery CSRF vulnerability in ThemeFusion Fusion Builder.This issue affects Fusion Builder: from n/a through 3.11.1...

CVE-2023-39311

Cross-Site Request Forgery CSRF vulnerability in ThemeFusion Fusion Builder.This issue affects Fusion Builder: from n/a through 3.11.1...

CVE-2023-39311 WordPress Avada Builder plugin <= 3.11.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in ThemeFusion Fusion Builder.This issue affects Fusion Builder: from n/a through 3.11.1...

CVE-2023-39311 WordPress Avada Builder plugin <= 3.11.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in ThemeFusion Fusion Builder.This issue affects Fusion Builder: from n/a through 3.11.1...

CVE-2023-39311

CVE-2023-39311 is a CSRF vulnerability in the WordPress plugin Fusion Builder (Fusion Builder). Affected versions are Fusion Builder

CVE-2024-30179

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BoldThemes Bold Page Builder allows Stored XSS.This issue affects Bold Page Builder: from n/a through 4.7.6...

CVE-2024-30179

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BoldThemes Bold Page Builder allows Stored XSS.This issue affects Bold Page Builder: from n/a through 4.7.6...

CVE-2024-29813

CVE-2024-29813 affects CartFlows Funnel Builder for WordPress, allowing Stored XSS via improper input handling during web page generation. Impact details are limited to Stored XSS with the affected range stated as n/a through 2.0.1; CVSS 3.1 base score 5.9. No fix version or remediation is provid...

CVE-2024-29813 WordPress CartFlows plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CartFlows Inc. Funnel Builder by CartFlows allows Stored XSS.This issue affects Funnel Builder by CartFlows: from n/a through 2.0.1...

CVE-2024-30184 WordPress Popup Builder plugin <= 4.2.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Looking Forward Software Incorporated. Popup Builder allows Stored XSS.This issue affects Popup Builder: from n/a through 4.2.6...

CVE-2024-30184

Technical details about CVE-2024-30184 (Popup Builder XSS) are not provided in the Connected Documents. No product/version specifics or remediation are disclosed here. Monitor for updates from vendors and advisories.

CVE-2024-30183

CVE-2024-30183 affects Livemesh Addons for WPBakery Page Builder. It is a Stored XSS caused by improper neutralization of input during web page generation, affecting versions up to 3.7. No explicit remediation details are provided in the connected documents; verify if a patch/version after 3.7 ex...

CVE-2024-30183 WordPress WPBakery Page Builder Addons by Livemesh plugin <= 3.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Livemesh Livemesh Addons for WPBakery Page Builder allows Stored XSS.This issue affects Livemesh Addons for WPBakery Page Builder: from n/a through 3.7...

CVE-2024-30179 WordPress Bold Page Builder plugin <= 4.7.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BoldThemes Bold Page Builder allows Stored XSS.This issue affects Bold Page Builder: from n/a through 4.7.6...

CVE-2024-30179 WordPress Bold Page Builder plugin <= 4.7.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BoldThemes Bold Page Builder allows Stored XSS.This issue affects Bold Page Builder: from n/a through 4.7.6...