Read the docs

Breakdance

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Breakdance records in CISA KEV

No Breakdance vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Elegant Custom Fonts 1 record LOW

Records

6 records

TI-2024-04949 CVE-2024-5330 · GHSA-2848-mrx7-c934

Breakdance <= 1.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 30

The Breakdance plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the breakdance_css_file_paths_cache parameter in all versions up to, and including, 1.7.2 due to insufficient input sanitization and ou…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00263 Published 2024-08-01 No fix listed CWE-79
TI-2023-06259 CVE-2023-6854 · GHSA-5w6g-chqx-w668

Breakdance <= 1.7.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via custom postmeta

Priority LOW 28

The Breakdance plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's custom postmeta output in all versions up to, and including, 1.7.0 due to insufficient input sanitization and output escap…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00324 Published 2024-05-06 No fix listed CWE-79
TI-2024-04950 CVE-2024-5331 · GHSA-c69h-4c8j-wh43

Breakdance <= 1.7.2 - Missing Authorization

Priority LOW 20

The Breakdance plugin for WordPress is vulnerable to unauthorized access of data in all versions up to, and including, 1.7.2.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00235 Published 2024-08-01 No fix listed CWE-284
Open these records in search →