Vulnerabilities

TI-2024-00993 CVE-2024-1072 · GHSA-3c4g-j683-8mx6

Missing authorization in SeedProd Website Builder by SeedProd — Theme Builder, Landing…

LOW 37

The Website Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the s…

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.0068 Published 2024-02-05 No fix listed CWE-862

TI-2023-04580 CVE-2023-4975 · GHSA-8m87-q3vv-mcr6

Website Builder by SeedProd <= 6.15.13.1 - Cross-Site Request Forgery to Settings Update

LOW 20

The Website Builder by SeedProd plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 6.15.13.1.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00324 Published 2023-10-20 No fix listed CWE-352

Vulnerabilities

Filters

Missing authorization in SeedProd Website Builder by SeedProd — Theme Builder, Landing…

Website Builder by SeedProd <= 6.15.13.1 - Cross-Site Request Forgery to Settings Update