buildwps — Vulnerabilities & Security Advisories 9

Buildwps is a WordPress website builder plugin that enables users to create custom pages through a drag-and-drop interface. Historically, it has been vulnerable to multiple remote code execution (RCE) and cross-site scripting (XSS) flaws, often stemming from insufficient input validation and improper sanitization. The plugin's extensive permissions and integration with WordPress core have also led to privilege escalation vulnerabilities. While no major public incidents have been widely documented, its four CVEs indicate a consistent pattern of security weaknesses that could allow attackers to compromise websites, manipulate content, or gain elevated access if not properly maintained.