Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: WP Page Builder 1.2.4 Clear all filters
TI-2021-06500 CVE-2021-24208 · GHSA-pf43-g47c-f3f8

WP Page Builder < 1.2.4 - Multiple Stored Cross-Site scripting (XSS)

Priority LOW 25

The editor of the WP Page Builder WordPress plugin before 1.2.4 allows lower-privileged users to insert unfiltered HTML, including JavaScript, into pages via the “Raw HTML” widget and the “Custom HTML” widgets (though th…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00658 Published 2021-04-05 Fixed in 1.2.4 CWE-79
TI-2021-06499 CVE-2021-24207 · GHSA-x6pg-q78v-fw5w

WP Page Builder < 1.2.4 - Insecure default configuration Allows Subscribers Editing Access to Posts

Priority LOW 21

By default, the WP Page Builder WordPress plugin before 1.2.4 allows subscriber-level users to edit and make changes to any and all posts pages - user roles must be specifically blocked from editing posts and pages.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00689 Published 2021-04-05 Fixed in 1.2.4 CWE-863