Brizy vulnerabilities

Products

• Brizy 27
• Brizy-page Builder 6
• Pro 3
• Unyson 3

Newest

• brizy WordPress Brizy plugin 2.8.23 - Cross Site Scripting (XSS) vulnerability CVE-2026-111844 6.5 MediumOctober 20, 2026
• brizy, themefusecom brizy – page builder +1 more Brizy <= 2.6.20 - Missing Authorization to Unauthenticated Limited File Upload CVE-2025-4370 5.3 MediumJuly 29, 2025
• brizy WordPress Brizy plugin <= 2.7.7 - Cross Site Scripting (XSS) vulnerability CVE-2025-32198 6.5 MediumApril 10, 2025
• brizy, brizy pro +1 more WordPress Brizy Pro plugin <= 2.6.1 - Cross Site Request Forgery (CSRF) vulnerability CVE-2025-26902 4.3 MediumApril 9, 2025
• brizy, brizy pro +1 more WordPress Brizy Pro plugin <= 2.6.1 - Broken Access Control vulnerability CVE-2025-26901 4.3 MediumApril 9, 2025
• brizy, themefusecom brizy – page builder +1 more Brizy – Page Builder <= 2.6.8 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload CVE-2024-10322 6.4 MediumFebruary 12, 2025
• brizy, themefusecom brizy – page builder +1 more Brizy – Page Builder <= 2.6.4 - Authenticated (Contributor+) Arbitrary File Upload via storeUploads CVE-2024-10960 9.9 CriticalFebruary 12, 2025
• brizy, brizy pro, notfound brizy pro +2 more WordPress Brizy Pro Plugin <= 2.6.1 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-22763 7.1 HighJanuary 21, 2025
• brizy, themefusecom brizy – page builder +1 more Brizy – Page Builder <= 2.5.1 - Cross-Site Request Forgery CVE-2024-6254 4.3 MediumAugust 8, 2024
• brizy, themefusecom brizy – page builder, brizy brizy-page builder +2 more Brizy – Page Builder <= 2.4.44 - Authenticated (Contributor+) Arbitrary File Upload CVE-2024-3242 8.8 HighJuly 18, 2024
• brizy, themefusecom brizy – page builder +1 more Brizy – Page Builder <= 2.4.44 - Missing Authorization to Authenticated (Contributor+) Post Modification CVE-2024-1937 7.1 HighJuly 16, 2024
• brizy, themefusecom brizy – page builder +1 more Brizy – Page Builder <= 2.4.43 - Authenticated(Contributor+) Stored Cross-Site Scripting via Form Functionality CVE-2024-1164 6.4 MediumJune 5, 2024
• brizy, themefusecom brizy – page builder +1 more Brizy – Page Builder <= 2.4.43 - Authenticated (Contributor+) Store Cross-Site Scripting via Widget Link To URL CVE-2024-3667 7.4 HighJune 5, 2024
• brizy, themefusecom brizy – page builder +1 more Brizy – Page Builder <= 2.4.43 - Unauthenticated Stored Cross-Site Scripting via Form CVE-2024-2087 7.2 HighJune 5, 2024
• brizy, themefusecom brizy – page builder, brizy brizy-page builder +2 more Brizy – Page Builder <= 2.4.41 - Authenticated(Contributor+) Stored Cross-Site Scripting CVE-2024-1940 7.1 HighJune 5, 2024
• brizy, themefusecom brizy – page builder +1 more Brizy – Page Builder <= 2.4.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Attributes CVE-2024-1161 6.4 MediumJune 5, 2024
• brizy, themefusecom brizy – page builder +1 more Brizy – Page Builder <= 2.4.43 - Missing Authorization CVE-2024-3711 4.3 MediumMay 23, 2024
• brizy unyson WordPress Unyson plugin <=2.7.29 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-34814 5.4 MediumMay 10, 2024
• brizy unyson WordPress Unyson plugin <= 2.7.28 - Broken Access Control vulnerability CVE-2023-44472 4.3 MediumMay 3, 2024
• brizy, themefusecom brizy – page builder +1 more Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-1291 6.4 MediumMarch 13, 2024
• brizy, themefusecom brizy – page builder, brizy brizy-page builder +2 more Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Arbitrary File Upload CVE-2024-1311 8.8 HighMarch 13, 2024
• brizy, themefusecom brizy – page builder +1 more Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-1293 6.4 MediumMarch 13, 2024
• brizy, themefusecom brizy – page builder +1 more Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-1296 6.4 MediumMarch 13, 2024
• brizy, themefusecom brizy – page builder +1 more Brizy – Page Builder <= 2.4.39 - Authenticated (Contributor+) Directory Traversal CVE-2024-1165 4.3 MediumFebruary 24, 2024
• brizy, brizy.io brizy – page builder +1 more WordPress Brizy – Page Builder Plugin <= 2.4.29 is vulnerable to Cross Site Scripting (XSS) CVE-2023-51396 6.5 MediumDecember 29, 2023
• brizy, themefusecom brizy – page builder +1 more Brizy < 1.0.126 - Authorization Bypass to Settings Updates CVE-2020-36714 7.4 HighOctober 20, 2023
• brizy, themefusecom brizy – page builder +1 more Brizy Page Builder <= 2.4.18 - IP Address Spoofing to Protection Mechanism Bypass CVE-2023-2897 3.7 LowJune 9, 2023
• brizy unyson Unyson < 2.7.27 - Reflected Cross-Site Scripting CVE-2022-2219 7.2 HighJuly 25, 2022
• brizy, themefusecom brizy – page builder +1 more Brizy Page Builder < 2.4.2 - Contributor+ Stored Cross-Site Scripting via Element Content CVE-2022-2041 5.4 MediumJune 27, 2022
• brizy, themefusecom brizy – page builder +1 more Brizy Page Builder < 2.4.2 - Contributor+ Stored Cross-Site Scripting via Element URL CVE-2022-2040 5.4 MediumJune 27, 2022
• brizy brizy-page builder, brizy.io brizy - page builder +1 more Brizy <= 2.3.11 Authenticated Unrestricted File Upload and Path Traversal CVE-2021-38346 8.8 HighOctober 14, 2021
• brizy brizy-page builder, brizy.io brizy - page builder +1 more Brizy <= 1.0.125 and 1.0.127 – 2.3.11 Incorrect authorization checks allowing Post modification CVE-2021-38345 7.1 HighOctober 14, 2021
• brizy brizy-page builder, brizy.io brizy - page builder +1 more Brizy <= 2.3.11 Authenticated Stored Cross-Site Scripting CVE-2021-38344 6.4 MediumOctober 14, 2021