Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: Breakdance Clear all filters
TI-2024-04950 CVE-2024-5331 · GHSA-c69h-4c8j-wh43

Breakdance <= 1.7.2 - Missing Authorization

Priority LOW 20

The Breakdance plugin for WordPress is vulnerable to unauthorized access of data in all versions up to, and including, 1.7.2.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00235 Published 2024-08-01 No fix listed CWE-284
TI-2024-04949 CVE-2024-5330 · GHSA-2848-mrx7-c934

Breakdance <= 1.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 30

The Breakdance plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the breakdance_css_file_paths_cache parameter in all versions up to, and including, 1.7.2 due to insufficient input sanitization and ou…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00263 Published 2024-08-01 No fix listed CWE-79
TI-2023-06259 CVE-2023-6854 · GHSA-5w6g-chqx-w668

Breakdance <= 1.7.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via custom postmeta

Priority LOW 28

The Breakdance plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's custom postmeta output in all versions up to, and including, 1.7.0 due to insufficient input sanitization and output escap…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00324 Published 2024-05-06 No fix listed CWE-79