Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: azexo Component: Page Builder With Image Map By Azexo Clear all filters
TI-2023-02860 CVE-2023-3053 · GHSA-fv4r-3m26-m5rg

Page Builder by AZEXO <= 1.27.133 - Missing Authorization to Post Creation

Priority LOW 25

The Page Builder by AZEXO plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'azh_add_post' function in versions up to, and including, 1.27.133.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00503 Published 2023-06-02 No fix listed CWE-862
TI-2023-02858 CVE-2023-3051 · GHSA-rwcj-q65x-gf4p

Page Builder by AZEXO <= 1.27.133 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Priority LOW 29

The Page Builder by AZEXO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'azh_post' shortcode in versions up to, and including, 1.27.133 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00476 Published 2023-06-02 No fix listed CWE-79