Themefusecom vulnerabilities

Products

• Brizy – Page Builder 26
• Brizy 8

Newest

• brizy WordPress Brizy plugin 2.8.23 - Cross Site Scripting (XSS) vulnerability CVE-2026-111844 6.5 MediumOctober 20, 2026
• themefusecom brizy – page builder Brizy <= 2.8.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'brizy-compiled-sections' Post Meta CVE-2026-14882 6.4 MediumOctober 10, 2026
• themefusecom brizy – page builder Brizy – Page Builder <= 2.8.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'rootAttributes' Parameter CVE-2026-2585 6.4 MediumSeptember 17, 2026
• themefusecom brizy Brizy - Page Builder < 2.8.19 - Contributor+ Template Type Update via IDOR CVE-2026-16070 2.7 LowAugust 4, 2026
• themefusecom brizy Brizy - Page Builder < 2.8.19 - Contributor+ Stored XSS via Featured Image Focal Point CVE-2026-16069 6.8 MediumAugust 4, 2026
• themefusecom brizy Brizy - Page Builder < 2.8.19 - Author+ Stored XSS via brizy_set_project Global Project Code Asset CVE-2026-16068 3.5 LowAugust 4, 2026
• themefusecom brizy Brizy – Page Builder < 2.8.18 - Contributor+ Sensitive Information Disclosure via get_post_info CVE-2026-14195 2.7 LowAugust 1, 2026
• themefusecom brizy – page builder Brizy – Page Builder <= 2.8.11 - Unauthenticated Stored Cross-Site Scripting via FileUpload Field Value CVE-2026-5324 7.2 HighMay 2, 2026
• themefusecom brizy WordPress Brizy plugin <= 2.7.23 - Broken Access Control vulnerability CVE-2026-32408 4.3 MediumMarch 13, 2026
• themefusecom brizy – page builder Brizy – Page Builder <= 2.7.16 - Authenticated (Contributor+) Sensitive Information Exposure via get_users Function CVE-2025-0969 6.5 MediumDecember 13, 2025
• themefusecom brizy WordPress Brizy Plugin <= 2.7.12 - Broken Access Control Vulnerability CVE-2025-58594 4.3 MediumSeptember 3, 2025
• brizy, themefusecom brizy – page builder +1 more Brizy <= 2.6.20 - Missing Authorization to Unauthenticated Limited File Upload CVE-2025-4370 5.3 MediumJuly 29, 2025
• brizy WordPress Brizy plugin <= 2.7.7 - Cross Site Scripting (XSS) vulnerability CVE-2025-32198 6.5 MediumApril 10, 2025
• brizy, themefusecom brizy – page builder +1 more Brizy – Page Builder <= 2.6.8 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload CVE-2024-10322 6.4 MediumFebruary 12, 2025
• brizy, themefusecom brizy – page builder +1 more Brizy – Page Builder <= 2.6.4 - Authenticated (Contributor+) Arbitrary File Upload via storeUploads CVE-2024-10960 9.9 CriticalFebruary 12, 2025
• themefuse maintenance mode, themefusecom themefuse maintenance mode +1 more WordPress ThemeFuse Maintenance Mode plugin <= 1.1.3 - CSRF to Stored XSS vulnerability CVE-2024-51645 7.1 HighNovember 19, 2024
• brizy, themefusecom brizy – page builder +1 more Brizy – Page Builder <= 2.5.1 - Cross-Site Request Forgery CVE-2024-6254 4.3 MediumAugust 8, 2024
• brizy, themefusecom brizy – page builder, brizy brizy-page builder +2 more Brizy – Page Builder <= 2.4.44 - Authenticated (Contributor+) Arbitrary File Upload CVE-2024-3242 8.8 HighJuly 18, 2024
• brizy, themefusecom brizy – page builder +1 more Brizy – Page Builder <= 2.4.44 - Missing Authorization to Authenticated (Contributor+) Post Modification CVE-2024-1937 7.1 HighJuly 16, 2024
• brizy, themefusecom brizy – page builder +1 more Brizy – Page Builder <= 2.4.43 - Authenticated(Contributor+) Stored Cross-Site Scripting via Form Functionality CVE-2024-1164 6.4 MediumJune 5, 2024
• brizy, themefusecom brizy – page builder +1 more Brizy – Page Builder <= 2.4.43 - Authenticated (Contributor+) Store Cross-Site Scripting via Widget Link To URL CVE-2024-3667 7.4 HighJune 5, 2024
• brizy, themefusecom brizy – page builder +1 more Brizy – Page Builder <= 2.4.43 - Unauthenticated Stored Cross-Site Scripting via Form CVE-2024-2087 7.2 HighJune 5, 2024
• brizy, themefusecom brizy – page builder, brizy brizy-page builder +2 more Brizy – Page Builder <= 2.4.41 - Authenticated(Contributor+) Stored Cross-Site Scripting CVE-2024-1940 7.1 HighJune 5, 2024
• brizy, themefusecom brizy – page builder +1 more Brizy – Page Builder <= 2.4.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Attributes CVE-2024-1161 6.4 MediumJune 5, 2024
• brizy, themefusecom brizy – page builder +1 more Brizy – Page Builder <= 2.4.43 - Missing Authorization CVE-2024-3711 4.3 MediumMay 23, 2024
• brizy, themefusecom brizy – page builder +1 more Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-1291 6.4 MediumMarch 13, 2024
• brizy, themefusecom brizy – page builder, brizy brizy-page builder +2 more Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Arbitrary File Upload CVE-2024-1311 8.8 HighMarch 13, 2024
• brizy, themefusecom brizy – page builder +1 more Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-1293 6.4 MediumMarch 13, 2024
• brizy, themefusecom brizy – page builder +1 more Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-1296 6.4 MediumMarch 13, 2024
• brizy, themefusecom brizy – page builder +1 more Brizy – Page Builder <= 2.4.39 - Authenticated (Contributor+) Directory Traversal CVE-2024-1165 4.3 MediumFebruary 24, 2024
• brizy, brizy.io brizy – page builder +1 more WordPress Brizy – Page Builder Plugin <= 2.4.29 is vulnerable to Cross Site Scripting (XSS) CVE-2023-51396 6.5 MediumDecember 29, 2023
• brizy, themefusecom brizy – page builder +1 more Brizy < 1.0.126 - Authorization Bypass to Settings Updates CVE-2020-36714 7.4 HighOctober 20, 2023
• brizy, themefusecom brizy – page builder +1 more Brizy Page Builder <= 2.4.18 - IP Address Spoofing to Protection Mechanism Bypass CVE-2023-2897 3.7 LowJune 9, 2023
• brizy, themefusecom brizy – page builder +1 more Brizy Page Builder < 2.4.2 - Contributor+ Stored Cross-Site Scripting via Element Content CVE-2022-2041 5.4 MediumJune 27, 2022
• brizy, themefusecom brizy – page builder +1 more Brizy Page Builder < 2.4.2 - Contributor+ Stored Cross-Site Scripting via Element URL CVE-2022-2040 5.4 MediumJune 27, 2022