Priority LOW 28
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Brainstorm Force Ultimate Addons for Beaver Builder – Lite allows Stored XSS.This issue affects Ultimate Addons…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.0026 · Published 2024-08-12 · No fix listed CWE-79
Priority LOW 30
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Brainstorm Force Ultimate Addons for Beaver Builder allows Relative Path Traversal.This issue affects Ultimate Addons for Be…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00562 · Published 2024-05-17 · No fix listed CWE-22
Priority MEDIUM 41
Improper Privilege Management vulnerability in Brainstorm Force Ultimate Addons for Beaver Builder allows Privilege Escalation.This issue affects Ultimate Addons for Beaver Builder: from n/a through 1.35.14.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00547 · Published 2024-05-17 · No fix listed CWE-269
Priority LOW 28
The Ultimate Addons for Beaver Builder – Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Advanced Icons widget in all versions up to, and including, 1.5.7 due to insufficient input sanitiza…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.0034 · Published 2024-03-30 · No fix listed CWE-79
Priority LOW 29
The Ultimate Addons for Beaver Builder – Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Info Table widget in all versions up to, and including, 1.5.7 due to insufficient input sanitization…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.0043 · Published 2024-03-30 · No fix listed CWE-79
Priority LOW 29
The Ultimate Addons for Beaver Builder – Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Button widget in all versions up to, and including, 1.5.7 due to insufficient input sanitization and…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.0043 · Published 2024-03-30 · No fix listed CWE-79
Priority LOW 29
The Ultimate Addons for Beaver Builder – Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Separator widget in all versions up to, and including, 1.5.7 due to insufficient input sanitiz…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.0043 · Published 2024-03-30 · No fix listed CWE-79
Priority LOW 28
The Ultimate Addons for Beaver Builder – Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Heading widget in all versions up to, and including, 1.5.7 due to insufficient input sanitization an…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.0034 · Published 2024-03-30 · No fix listed CWE-79
Priority LOW 20
Missing Authorization vulnerability in Brainstorm Force Ultimate Addons for Beaver Builder – Lite.This issue affects Ultimate Addons for Beaver Builder – Lite: from n/a through 1.5.5.
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00321 · Published 2024-01-17 · No fix listed CWE-862