Browse all 5 CVE security advisories affecting Builderall. AI-powered Chinese analysis, POCs, and references for each vulnerability.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-15820 | Builderall for WordPress <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Photo Module 'attributes' Setting — Builderall for WordPress CWE-79 | 6.4 | Medium | 2026-09-10 |
| CVE-2026-15796 | Builderall for WordPress <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'bg_video_service_url' Setting — Builderall for WordPress CWE-79 | 6.4 | Medium | 2026-09-10 |
| CVE-2026-15823 | Builderall for WordPress <= 3.0.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Modification via 'ba_cheetah_data[post_id]' Parameter — Builderall for WordPress CWE-862 | 4.3 | Medium | 2026-09-10 |
This page lists every published CVE security advisory associated with Builderall. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.