Read the docs

builderall

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

builderall records in CISA KEV

No builderall vulnerabilities are listed in CISA KEV.

Records

5 records

TI-2026-17971 CVE-2026-22390 · GHSA-7hg2-6fhq-6jj6

WordPress Builderall Builder for WordPress plugin <= 3.0.1 - Remote Code Execution (RCE) vulnerability

Priority MEDIUM 44

Improper Control of Generation of Code ('Code Injection') vulnerability in Builderall Builderall Builder for WordPress builderall-cheetah-for-wp allows Code Injection.This issue affects Builderall Builder for WordPress:…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00545 Published 2026-03-05 No fix listed CWE-94
TI-2026-13305 CVE-2026-15820 · GHSA-g7cw-8rxh-mw2v

Cross-site scripting in Builderall for WordPress

Priority LOW 28

The Builderall for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Photo Module 'attributes' Setting in all versions up to, and including, 3.0.2 due to insufficient input sanitization and…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00349 Published 2026-09-10 No fix listed CWE-79
TI-2026-13289 CVE-2026-15796 · GHSA-g6m8-3ghv-56h7

Cross-site scripting in Builderall for WordPress

Priority LOW 28

The Builderall for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'bg_video_service_url' Setting in all versions up to, and including, 3.0.2 due to insufficient input sanitization and out…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00331 Published 2026-09-10 No fix listed CWE-79
TI-2025-39135 CVE-2025-62987 · GHSA-3wcv-7wxv-gvf8

WordPress Builderall Builder for WordPress plugin <= 3.0.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Builderall Builderall Builder for WordPress builderall-cheetah-for-wp allows Stored XSS.This issue affects Builderall…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00165 Published 2025-10-27 No fix listed CWE-79
TI-2026-13307 CVE-2026-15823 · GHSA-h65g-px8c-6wr8

Missing authorization in Builderall for WordPress

Priority LOW 20

The Builderall Cheetah For Wp plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the disable() function in versions up to, and including, 3.0.2.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00336 Published 2026-09-10 No fix listed CWE-862
Open these records in search →