Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Brizy – Page Builder — Vulnerabilities & Security Advisories 25

All 25 CVE vulnerabilities found in Brizy – Page Builder, with AI-generated Chinese analysis, references, and POCs.

This vulnerability aggregation page compiles security advisories for Brizy – Page Builder, a web development tool. It collects publicly disclosed vulnerabilities affecting the product, covering its full history from initial release to the present. The page organizes data by weakness type, such as cross-site scripting, SQL injection, or privilege escalation, enabling users to analyze specific vulnerability classes. Readers can track the vendor’s advisory history, understand the prevalence of particular weakness types within this product, and review the complete vulnerability timeline. This resource serves as a centralized reference for security professionals and developers working with the Brizy ecosystem.

Vendor: Unknown

CVE ID Title CVSS Severity Published
CVE-2026-2585 Brizy – Page Builder <= 2.8.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'rootAttributes' Parameter CWE-79 6.4 Medium 2026-09-17
CVE-2026-5324 Brizy – Page Builder <= 2.8.11 - Unauthenticated Stored Cross-Site Scripting via FileUpload Field Value CWE-79 7.2 High 2026-05-02
CVE-2025-0969 Brizy – Page Builder <= 2.7.16 - Authenticated (Contributor+) Sensitive Information Exposure via get_users Function CWE-359 6.5 Medium 2025-12-13
CVE-2025-4370 Brizy <= 2.6.20 - Missing Authorization to Unauthenticated Limited File Upload CWE-862 5.3 Medium 2025-07-29
CVE-2024-10322 Brizy – Page Builder <= 2.6.8 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload CWE-79 6.4 Medium 2025-02-12
CVE-2024-10960 Brizy – Page Builder <= 2.6.4 - Authenticated (Contributor+) Arbitrary File Upload via storeUploads CWE-434 9.9 Critical 2025-02-12
CVE-2024-6254 Brizy – Page Builder <= 2.5.1 - Cross-Site Request Forgery CWE-20 4.3 Medium 2024-08-08
CVE-2024-3242 Brizy – Page Builder <= 2.4.44 - Authenticated (Contributor+) Arbitrary File Upload CWE-434 8.8 High 2024-07-18
CVE-2024-1937 Brizy – Page Builder <= 2.4.44 - Missing Authorization to Authenticated (Contributor+) Post Modification CWE-862 7.1 High 2024-07-16
CVE-2024-1164 Brizy – Page Builder <= 2.4.43 - Authenticated(Contributor+) Stored Cross-Site Scripting via Form Functionality CWE-79 6.4 Medium 2024-06-05
CVE-2024-3667 Brizy – Page Builder <= 2.4.43 - Authenticated (Contributor+) Store Cross-Site Scripting via Widget Link To URL CWE-79 7.4 High 2024-06-05
CVE-2024-1940 Brizy – Page Builder <= 2.4.41 - Authenticated(Contributor+) Stored Cross-Site Scripting CWE-79 7.1 High 2024-06-05
CVE-2024-2087 Brizy – Page Builder <= 2.4.43 - Unauthenticated Stored Cross-Site Scripting via Form CWE-79 7.2 High 2024-06-05
CVE-2024-1161 Brizy – Page Builder <= 2.4.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Attributes CWE-79 6.4 Medium 2024-06-05
CVE-2024-3711 Brizy – Page Builder <= 2.4.43 - Missing Authorization CWE-862 4.3 Medium 2024-05-23
CVE-2024-1291 Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 6.4 Medium 2024-03-13
CVE-2024-1311 Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Arbitrary File Upload CWE-434 8.8 High 2024-03-13
CVE-2024-1293 Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 6.4 Medium 2024-03-13
CVE-2024-1296 Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 6.4 Medium 2024-03-13
CVE-2024-1165 Brizy – Page Builder <= 2.4.39 - Authenticated (Contributor+) Directory Traversal CWE-22 4.3 Medium 2024-02-24
CVE-2023-51396 WordPress Brizy – Page Builder Plugin <= 2.4.29 is vulnerable to Cross Site Scripting (XSS) CWE-79 6.5 Medium 2023-12-29
CVE-2020-36714 Brizy < 1.0.126 - Authorization Bypass to Settings Updates CWE-285 7.4 High 2023-10-20
CVE-2023-2897 Brizy Page Builder <= 2.4.18 - IP Address Spoofing to Protection Mechanism Bypass CWE-348 3.7 Low 2023-06-09
CVE-2022-2041 Brizy Page Builder < 2.4.2 - Contributor+ Stored Cross-Site Scripting via Element Content CWE-79 5.4 - 2022-06-27
CVE-2022-2040 Brizy Page Builder < 2.4.2 - Contributor+ Stored Cross-Site Scripting via Element URL CWE-79 5.4 - 2022-06-27

All 25 known CVE vulnerabilities affecting Brizy – Page Builder with full Chinese analysis, references, and POCs where available.