Lucene search

K
BrainstormforceUltimate Addons For Beaver Builder

9 matches found

CVE
CVE
added 2024/05/17 9:15 a.m.80 views

CVE-2023-51401

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Brainstorm Force Ultimate Addons for Beaver Builder allows Relative Path Traversal.This issue affects Ultimate Addons for Beaver Builder: from n/a through 1.35.13.

6.5CVSS6.7AI score0.00569EPSS
CVE
CVE
added 2024/05/17 9:15 a.m.59 views

CVE-2023-51398

Improper Privilege Management vulnerability in Brainstorm Force Ultimate Addons for Beaver Builder allows Privilege Escalation.This issue affects Ultimate Addons for Beaver Builder: from n/a through 1.35.14.

8.8CVSS6.9AI score0.00127EPSS
CVE
CVE
added 2024/03/30 7:15 a.m.53 views

CVE-2024-2142

The Ultimate Addons for Beaver Builder – Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Info Table widget in all versions up to, and including, 1.5.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with ...

6.4CVSS7.6AI score0.00093EPSS
CVE
CVE
added 2024/03/30 7:15 a.m.47 views

CVE-2024-2144

The Ultimate Addons for Beaver Builder – Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Separator widget in all versions up to, and including, 1.5.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, ...

6.4CVSS7.6AI score0.00093EPSS
CVE
CVE
added 2024/03/30 7:15 a.m.44 views

CVE-2024-2143

The Ultimate Addons for Beaver Builder – Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Heading widget in all versions up to, and including, 1.5.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with con...

6.4CVSS7.6AI score0.0008EPSS
CVE
CVE
added 2024/03/30 7:15 a.m.41 views

CVE-2024-2140

The Ultimate Addons for Beaver Builder – Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Advanced Icons widget in all versions up to, and including, 1.5.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, w...

6.4CVSS7.6AI score0.0008EPSS
CVE
CVE
added 2024/03/30 7:15 a.m.41 views

CVE-2024-2141

The Ultimate Addons for Beaver Builder – Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Button widget in all versions up to, and including, 1.5.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with cont...

6.4CVSS7.6AI score0.00102EPSS
CVE
CVE
added 2024/08/12 10:15 p.m.34 views

CVE-2024-43151

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Brainstorm Force Ultimate Addons for Beaver Builder – Lite allows Stored XSS.This issue affects Ultimate Addons for Beaver Builder – Lite: from n/a through 1.5.9.

6.5CVSS6.5AI score0.00064EPSS
CVE
CVE
added 2024/01/17 5:15 p.m.26 views

CVE-2023-23882

Missing Authorization vulnerability in Brainstorm Force Ultimate Addons for Beaver Builder – Lite.This issue affects Ultimate Addons for Beaver Builder – Lite: from n/a through 1.5.5.

4.3CVSS4.7AI score0.00052EPSS