Brizy Page Builder
Approved changes feed: RSS · Atom
cpe:2.3:a:brizy:brizy-page_builder:*:*:*:*:wordpress:*:*:*
part: a version: * update: *
| Vendor | Brizy (605b6e40-0e96-56bf-9423-a595e83991de) |
|---|---|
| Product | Brizy Page Builder (c6f11c4b-0507-5bbb-b881-3c0b498bdf5d) |
| Edition | * |
| Language | * |
| Software edition | wordpress |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/themefuse/brizy |
purl2cpe | 2026-06-01 10:17:12.826418 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-1311 |
vulnerable | 2026-06-08 06:25:39.790412 |
Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Arbitrary File Upload
HIGH (8.8)
The Brizy – Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the storeImages function in all versions up to, and including, 2.4.40. This makes it possible for authenticated attackers, with contributor access or above, to upload arbitrary files on the affected site's server which may make remote code execution possible.
Published: 2024-03-13T15:27:18.889Z
Updated: 2026-04-08T17:27:42.553Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-38345 |
vulnerable | 2026-06-08 05:32:55.936111 |
Brizy <= 1.0.125 and 1.0.127 – 2.3.11 Incorrect authorization checks allowing Post modification
HIGH (7.1)
The Brizy Page Builder plugin <= 2.3.11 for WordPress used an incorrect authorization check that allowed any logged-in user accessing any endpoint in the wp-admin directory to modify the content of any existing post or page created with the Brizy editor. An identical issue was found by another researcher in Brizy <= 1.0.125 and fixed in version 1.0.126, but the vulnerability was reintroduced in version 1.0.127.
Published: 2021-10-14T15:56:51.848Z
Updated: 2025-02-14T18:11:40.173Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.