Lucene search
+L

82 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/19 12:00 a.m.•6 views

CVE-2025-39410: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in themegusta Smart Sections Theme Builder - WPBakery Page Builder Addon.This issue affects Smart Sections Theme Builder - WPBakery Page Builder Addon: from n/a through 1.7.8...

9.8CVSS5.8AI score0.00499EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/04/06 5:13 p.m.•14 views

CVE-2025-32201

Missing Authorization vulnerability in Xpro Xpro Theme Builder xpro-theme-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Xpro Theme Builder: from n/a through = 1.2.8.4...

4.3CVSS7.2AI score0.00457EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/04 4:15 p.m.•10 views

CVE-2025-32201

Missing Authorization vulnerability in Xpro Xpro Theme Builder xpro-theme-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Xpro Theme Builder: from n/a through = 1.2.8.4...

4.3CVSS0.00457EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/04 3:59 p.m.•11 views

CVE-2025-32201 WordPress Xpro Theme Builder Plugin <= 1.2.8.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Xpro Xpro Theme Builder allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Xpro Theme Builder: from n/a through 1.2.8.3...

4.3CVSS7.1AI score0.00457EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/04 3:59 p.m.•26 views

CVE-2025-32201 WordPress Xpro Theme Builder Plugin <= 1.2.8.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Xpro Xpro Theme Builder xpro-theme-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Xpro Theme Builder: from n/a through = 1.2.8.4...

4.3CVSS0.00457EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/04 3:59 p.m.•56 views

CVE-2025-32201

CVE-2025-32201 : Missing Authorization in the WordPress plugin Xpro Theme Builder affects versions from n/a up to 1.2.8.3. The provided documents include limited technical details (affected version range, vulnerability class) and CVSS v3.1 data (base score 4.3, medium). No explicit root cause, ex...

4.3CVSS7.2AI score0.00457EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/04 12:00 a.m.•5 views

CVE-2025-32201: Missing Authorization

Missing Authorization vulnerability in Xpro Xpro Theme Builder xpro-theme-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Xpro Theme Builder: from n/a through = 1.2.8.4...

4.3CVSS5.9AI score0.00457EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/04 12:00 a.m.•13 views

PT-2025-14981 · Unknown · Xpro Theme Builder

Name of the Vulnerable Software and Affected Versions: Xpro Theme Builder versions 1.2.8.3 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For Xpro Theme Builder...

4.3CVSS5.3AI score0.00457EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2024/11/21 10:49 p.m.•21 views

WordPress Theme Builder For Elementor plugin <= 1.2.2 - Authenticated (Contributor+) Post Disclosure vulnerability

Authenticated Contributor+ Post Disclosure vulnerability discovered by Francesco Carlucci in WordPress Plugin Theme Builder For Elementor versions = 1.2.2...

4.3CVSS7AI score0.00468EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/11/21 5:33 a.m.•17 views

CVE-2024-10782 Theme Builder For Elementor <= 1.2.2 - Authenticated (Contributor+) Post Disclosure

The Theme Builder For Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.2.2 via the 'elementor-template' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with...

4.3CVSS6.6AI score0.00468EPSS
SaveExploits0References2
CVE
CVE
•added 2024/11/21 5:33 a.m.•78 views

CVE-2024-10782

The CVE CVE-2024-10782 affects the WordPress Theme Builder For Elementor plugin (versions up to 1.2.2). The root cause is insufficient restrictions on which posts can be included via the elementor-template shortcode, enabling authenticated attackers with Contributor-level access and above to expo...

4.3CVSS4.3AI score0.00468EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/11/21 12:00 a.m.•21 views

WordPress plugin Theme Builder For Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.3CVSS8.2AI score0.00468EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2024/11/21 12:00 a.m.•27 views

WordPress Theme Builder For Elementor Plugin <= 1.2.2 is vulnerable to Broken Access Control

Software Theme Builder For Elementor Type Plugin Vulnerable versions = 1.2.2 Fixed in 1.2.3 OWASP Top 10 A7: Identification and Authentication Failures Classification Broken Access Control CVE CVE-2024-10782 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 266b574a3c97...

4.3CVSS6.7AI score0.00468EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/21 12:00 a.m.•8 views

CVE-2024-10782: Authorization Bypass Through User-Controlled Key

The Theme Builder For Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.2.2 via the 'elementor-template' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with...

4.3CVSS5.7AI score0.00468EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/11/04 3:15 p.m.•16 views

CVE-2024-51682

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in HasThemes HT Builder – WordPress Theme Builder for Elementor allows Stored XSS.This issue affects HT Builder – WordPress Theme Builder for Elementor: from n/a through 1.3.0...

5.4CVSS5.8AI score0.00254EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/04 3:15 p.m.•23 views

CVE-2024-51682

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in HasThemes HT Builder – WordPress Theme Builder for Elementor ht-builder allows Stored XSS.This issue affects HT Builder – WordPress Theme Builder for Elementor: from n/a through = 1.3.0...

6.5CVSS0.00254EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/04 12:00 a.m.•6 views

CVE-2024-51682: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in HasThemes HT Builder – WordPress Theme Builder for Elementor ht-builder allows Stored XSS.This issue affects HT Builder – WordPress Theme Builder for Elementor: from n/a through = 1.3.0...

6.5CVSS5.8AI score0.00254EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/11/01 12:00 a.m.•26 views

WordPress HT Builder – WordPress Theme Builder for Elementor Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)

Software HT Builder – WordPress Theme Builder for Elementor Type Plugin Vulnerable versions = 1.3.0 Fixed in 1.3.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51682 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 0f85ba0467c8 Credits Gab...

6.5CVSS6.7AI score0.00254EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2024/06/19 11:15 a.m.•35 views

CVE-2023-47783

Missing Authorization vulnerability in Thrive Themes Thrive Theme Builder.This issue affects Thrive Theme Builder: from n/a before 3.24.0...

8.3CVSS0.00356EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/06/19 10:36 a.m.•50 views

CVE-2023-47783 WordPress Thrive Theme Builder theme < 3.24.0 - Multiple Authenticated Broken Access Control vulnerability

Missing Authorization vulnerability in Thrive Themes Thrive Theme Builder.This issue affects Thrive Theme Builder: from n/a before 3.24.0...

8.3CVSS0.00356EPSS
SaveExploits0References1
Rows per page
Query Builder