Be Rest Endpoints
Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:be_rest_endpoints:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | Be Rest Endpoints (243301da-1afb-57d6-9d9c-421d69810bc5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-81742 |
vulnerable | 2026-09-16 04:32:48.326425 |
BE REST Endpoints <= 1.0.0 - Unauthenticated Stored XSS and Widget Manipulation
The BE REST Endpoints WordPress plugin through 1.0.0 does not perform any authorization check before allowing widgets to be read, created, updated and deleted, and does not sanitize the values it stores in them, allowing unauthenticated users to inject arbitrary web scripts which will execute in the browser of any user visiting the site.
Published: 2026-09-12T06:00:09.778Z
Updated: 2026-09-12T15:33:23.328Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.