CVE-2025-4370

creationtimestamp| type| source ---|---|--- 2025-07-29 04:46:44+00:00| seen| Telegram/ZSnL12gFHkjYjeBhAYUOafXCTCZI7xJyakghyAAgKcjSdEw...

CVE-2025-4370 Brizy <= 2.6.20 - Missing Authorization to Unauthenticated Limited File Upload

The Brizy – Page Builder plugin for WordPress is vulnerable to limited file uploads due to missing authorization on processexternalasseturls function as well as missing path validation in storefile function in all versions up to, and including, 2.6.20. This makes it possible for unauthenticated...

CVE-2025-4370

CVE-2025-4370 reports a vulnerability in Brizy – Page Builder for WordPress (versions up to and including 2.6.20) where unauthenticated attackers can upload limited file types due to missing authorization in process_external_asset_urls and missing path validation in store_file. This leads to unin...

WordPress Brizy plugin <= 2.6.20 - Missing Authorization to Unauthenticated Limited File Upload vulnerability

Missing Authorization to Unauthenticated Limited File Upload vulnerability discovered by mikemyers in WordPress Plugin Brizy versions = 2.6.20...