{"items":[{"id":"CVE-2026-14882","published":"2026-10-10T05:31:06.628Z","updated":"2026-10-11T12:23:56.625Z","title":"Brizy <= 2.8.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'brizy-compiled-sections' Post Meta","severity":"MEDIUM","score":6.4,"vendor":"themefusecom","product":"Brizy – Page Builder","kev":false,"epss":0.00152,"kevAdded":null},{"id":"CVE-2026-2585","published":"2026-09-17T23:27:10.435Z","updated":"2026-09-19T14:21:52.847Z","title":"Brizy – Page Builder <= 2.8.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'rootAttributes' Parameter","severity":"MEDIUM","score":6.4,"vendor":"themefusecom","product":"Brizy – Page Builder","kev":false,"epss":0.00261,"kevAdded":null},{"id":"CVE-2026-5324","published":"2026-05-02T08:27:05.238Z","updated":"2026-05-04T17:51:44.700Z","title":"Brizy – Page Builder <= 2.8.11 - Unauthenticated Stored Cross-Site Scripting via FileUpload Field Value","severity":"HIGH","score":7.2,"vendor":"themefusecom","product":"Brizy – Page Builder","kev":false,"epss":0.00401,"kevAdded":null},{"id":"CVE-2026-32408","published":"2026-03-13T11:42:13.798Z","updated":"2026-04-29T09:51:58.964Z","title":"WordPress Brizy plugin <= 2.7.23 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"themefusecom","product":"Brizy","kev":false,"epss":0.00183,"kevAdded":null},{"id":"CVE-2025-0969","published":"2025-12-13T08:21:13.768Z","updated":"2026-04-08T16:54:50.850Z","title":"Brizy – Page Builder <= 2.7.16 - Authenticated (Contributor+) Sensitive Information Exposure via get_users Function","severity":"MEDIUM","score":6.5,"vendor":"themefusecom","product":"Brizy – Page Builder","kev":false,"epss":0.00388,"kevAdded":null},{"id":"CVE-2025-58594","published":"2025-09-03T14:36:36.858Z","updated":"2026-05-12T00:40:46.447Z","title":"WordPress Brizy Plugin <= 2.7.12 - Broken Access Control Vulnerability","severity":"MEDIUM","score":4.3,"vendor":"themefusecom","product":"Brizy","kev":false,"epss":0.00241,"kevAdded":null},{"id":"CVE-2025-4370","published":"2025-07-29T04:23:46.517Z","updated":"2026-04-08T17:27:30.972Z","title":"Brizy <= 2.6.20 - Missing Authorization to Unauthenticated Limited File Upload","severity":"MEDIUM","score":5.3,"vendor":"themefusecom","product":"Brizy – Page Builder","kev":false,"epss":0.00314,"kevAdded":null},{"id":"CVE-2025-32198","published":"2025-04-10T08:09:43.505Z","updated":"2026-04-28T16:12:18.792Z","title":"WordPress Brizy plugin <= 2.7.7 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"themefusecom","product":"Brizy","kev":false,"epss":0.00282,"kevAdded":null},{"id":"CVE-2024-10322","published":"2025-02-12T12:22:09.050Z","updated":"2026-04-08T16:47:08.268Z","title":"Brizy – Page Builder <= 2.6.8 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload","severity":"MEDIUM","score":6.4,"vendor":"themefusecom","product":"Brizy – Page Builder","kev":false,"epss":0.0036,"kevAdded":null},{"id":"CVE-2024-10960","published":"2025-02-12T11:11:15.504Z","updated":"2026-04-08T16:44:35.072Z","title":"Brizy – Page Builder <= 2.6.4 - Authenticated (Contributor+) Arbitrary File Upload via storeUploads","severity":"CRITICAL","score":9.9,"vendor":"themefusecom","product":"Brizy – Page Builder","kev":false,"epss":0.00909,"kevAdded":null},{"id":"CVE-2024-51645","published":"2024-11-19T16:32:23.763Z","updated":"2026-05-11T22:11:01.745Z","title":"WordPress ThemeFuse Maintenance Mode plugin <= 1.1.3 - CSRF to Stored XSS vulnerability","severity":"HIGH","score":7.1,"vendor":"themefusecom","product":"ThemeFuse Maintenance Mode","kev":false,"epss":0.00227,"kevAdded":null},{"id":"CVE-2024-6254","published":"2024-08-08T03:30:45.320Z","updated":"2026-04-08T17:01:25.787Z","title":"Brizy – Page Builder <= 2.5.1 - Cross-Site Request Forgery","severity":"MEDIUM","score":4.3,"vendor":"themefusecom","product":"Brizy – Page Builder","kev":false,"epss":0.00297,"kevAdded":null},{"id":"CVE-2024-3242","published":"2024-07-18T08:33:03.613Z","updated":"2026-04-08T17:12:57.552Z","title":"Brizy – Page Builder <= 2.4.44 - Authenticated (Contributor+) Arbitrary File Upload","severity":"HIGH","score":8.8,"vendor":"themefusecom","product":"Brizy – Page Builder","kev":false,"epss":0.00963,"kevAdded":null},{"id":"CVE-2024-1937","published":"2024-07-16T08:32:32.361Z","updated":"2026-04-08T17:18:28.619Z","title":"Brizy – Page Builder <= 2.4.44 - Missing Authorization to Authenticated (Contributor+) Post Modification","severity":"HIGH","score":7.1,"vendor":"themefusecom","product":"Brizy – Page Builder","kev":false,"epss":0.00365,"kevAdded":null},{"id":"CVE-2024-1164","published":"2024-06-05T06:50:28.584Z","updated":"2026-04-08T17:10:23.593Z","title":"Brizy – Page Builder <= 2.4.43 - Authenticated(Contributor+) Stored Cross-Site Scripting via Form Functionality","severity":"MEDIUM","score":6.4,"vendor":"themefusecom","product":"Brizy – Page Builder","kev":false,"epss":0.00252,"kevAdded":null},{"id":"CVE-2024-3667","published":"2024-06-05T05:33:07.081Z","updated":"2026-04-08T17:32:20.812Z","title":"Brizy – Page Builder <= 2.4.43 - Authenticated (Contributor+) Store Cross-Site Scripting via Widget Link To URL","severity":"HIGH","score":7.4,"vendor":"themefusecom","product":"Brizy – Page Builder","kev":false,"epss":0.00322,"kevAdded":null},{"id":"CVE-2024-1940","published":"2024-06-05T05:33:06.619Z","updated":"2026-04-08T17:28:41.685Z","title":"Brizy – Page Builder <= 2.4.41 - Authenticated(Contributor+) Stored Cross-Site Scripting","severity":"HIGH","score":7.1,"vendor":"themefusecom","product":"Brizy – Page Builder","kev":false,"epss":0.00267,"kevAdded":null},{"id":"CVE-2024-2087","published":"2024-06-05T05:33:06.148Z","updated":"2026-04-08T16:58:37.069Z","title":"Brizy – Page Builder <= 2.4.43 - Unauthenticated Stored Cross-Site Scripting via Form","severity":"HIGH","score":7.2,"vendor":"themefusecom","product":"Brizy – Page Builder","kev":false,"epss":0.00378,"kevAdded":null},{"id":"CVE-2024-1161","published":"2024-06-05T05:33:04.995Z","updated":"2026-04-08T16:43:56.416Z","title":"Brizy – Page Builder <= 2.4.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Attributes","severity":"MEDIUM","score":6.4,"vendor":"themefusecom","product":"Brizy – Page Builder","kev":false,"epss":0.00252,"kevAdded":null},{"id":"CVE-2024-3711","published":"2024-05-23T05:32:15.933Z","updated":"2026-04-08T17:00:22.356Z","title":"Brizy – Page Builder <= 2.4.43 - Missing Authorization","severity":"MEDIUM","score":4.3,"vendor":"themefusecom","product":"Brizy – Page Builder","kev":false,"epss":0.00343,"kevAdded":null},{"id":"CVE-2024-1291","published":"2024-03-13T15:27:27.025Z","updated":"2026-04-08T17:34:31.961Z","title":"Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scripting","severity":"MEDIUM","score":6.4,"vendor":"themefusecom","product":"Brizy – Page Builder","kev":false,"epss":0.00389,"kevAdded":null},{"id":"CVE-2024-1311","published":"2024-03-13T15:27:18.889Z","updated":"2026-04-08T17:27:42.553Z","title":"Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Arbitrary File Upload","severity":"HIGH","score":8.8,"vendor":"themefusecom","product":"Brizy – Page Builder","kev":false,"epss":0.01485,"kevAdded":null},{"id":"CVE-2024-1293","published":"2024-03-13T15:26:50.158Z","updated":"2026-04-08T16:54:29.021Z","title":"Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scripting","severity":"MEDIUM","score":6.4,"vendor":"themefusecom","product":"Brizy – Page Builder","kev":false,"epss":0.00399,"kevAdded":null},{"id":"CVE-2024-1296","published":"2024-03-13T15:26:45.344Z","updated":"2026-04-08T16:47:48.167Z","title":"Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scripting","severity":"MEDIUM","score":6.4,"vendor":"themefusecom","product":"Brizy – Page Builder","kev":false,"epss":0.00512,"kevAdded":null},{"id":"CVE-2024-1165","published":"2024-02-24T09:38:22.454Z","updated":"2026-04-08T17:01:31.147Z","title":"Brizy – Page Builder <= 2.4.39 - Authenticated (Contributor+) Directory Traversal","severity":"MEDIUM","score":4.3,"vendor":"themefusecom","product":"Brizy – Page Builder","kev":false,"epss":0.00817,"kevAdded":null},{"id":"CVE-2020-36714","published":"2023-10-20T07:29:23.827Z","updated":"2026-04-08T17:09:53.442Z","title":"Brizy < 1.0.126 - Authorization Bypass to Settings Updates","severity":"HIGH","score":7.4,"vendor":"themefusecom","product":"Brizy – Page Builder","kev":false,"epss":0.00517,"kevAdded":null},{"id":"CVE-2023-2897","published":"2023-06-09T06:48:49.496Z","updated":"2026-04-08T17:15:20.704Z","title":"Brizy Page Builder <= 2.4.18 - IP Address Spoofing to Protection Mechanism Bypass","severity":"LOW","score":3.7,"vendor":"themefusecom","product":"Brizy – Page Builder","kev":false,"epss":0.00295,"kevAdded":null}]}