Brizy.io Brizy - Page Builder
3 CVEs affecting Brizy.io Brizy - Page Builder. Latest disclosed: 2021-10-14. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-38346 | High | 8.8 | 2021-10-14 | The Brizy Page Builder plugin <= 2.3.11 for WordPress allowed authenticated users to upload executable files to a location of their choice using the brizy_crea… |
CVE-2021-38345 | High | 7.1 | 2021-10-14 | The Brizy Page Builder plugin <= 2.3.11 for WordPress used an incorrect authorization check that allowed any logged-in user accessing any endpoint in the wp-ad… |
CVE-2021-38344 | Medium | 6.4 | 2021-10-14 | The Brizy Page Builder plugin <= 2.3.11 for WordPress was vulnerable to stored XSS by lower-privileged users such as a subscribers. It was possible to add mali… |