Lucene search

K
WpzoomBeaver Builder Addons

7 matches found

CVE
CVE
added 2024/04/09 7:15 p.m.57 views

CVE-2024-2183

The Beaver Builder Addons by WPZOOM plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Heading widget in all versions up to, and including, 1.3.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-l...

6.4CVSS7.6AI score0.00229EPSS
CVE
CVE
added 2024/04/09 7:15 p.m.54 views

CVE-2024-2186

The Beaver Builder Addons by WPZOOM plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Team Members widget in all versions up to, and including, 1.3.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contribu...

6.4CVSS7.6AI score0.00229EPSS
CVE
CVE
added 2024/04/09 7:15 p.m.53 views

CVE-2024-2187

The Beaver Builder Addons by WPZOOM plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Testimonials widget in all versions up to, and including, 1.3.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contribu...

6.4CVSS7.6AI score0.00327EPSS
CVE
CVE
added 2024/04/09 7:15 p.m.51 views

CVE-2024-2185

The Beaver Builder Addons by WPZOOM plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Box widget in all versions up to, and including, 1.3.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor...

6.4CVSS7.6AI score0.00229EPSS
CVE
CVE
added 2024/04/09 7:15 p.m.50 views

CVE-2024-2181

The Beaver Builder Addons by WPZOOM plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Button widget in all versions up to, and including, 1.3.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-le...

6.4CVSS7.6AI score0.00229EPSS
CVE
CVE
added 2024/11/19 10:15 p.m.47 views

CVE-2024-30424

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPZOOM Beaver Builder Addons by WPZOOM allows Stored XSS.This issue affects Beaver Builder Addons by WPZOOM: from n/a through 1.3.4.

6.5CVSS5.8AI score0.00039EPSS
CVE
CVE
added 2024/07/09 12:15 p.m.42 views

CVE-2024-37464

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPZOOM Beaver Builder Addons by WPZOOM allows Path Traversal.This issue affects Beaver Builder Addons by WPZOOM: from n/a through 1.3.5.

4.9CVSS5.5AI score0.00775EPSS