Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: builderall Clear all filters
TI-2026-13305 CVE-2026-15820 · GHSA-g7cw-8rxh-mw2v

Cross-site scripting in Builderall for WordPress

Priority LOW 28

The Builderall for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Photo Module 'attributes' Setting in all versions up to, and including, 3.0.2 due to insufficient input sanitization and…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00349 Published 2026-09-10 No fix listed CWE-79
TI-2026-13307 CVE-2026-15823 · GHSA-h65g-px8c-6wr8

Missing authorization in Builderall for WordPress

Priority LOW 20

The Builderall Cheetah For Wp plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the disable() function in versions up to, and including, 3.0.2.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00336 Published 2026-09-10 No fix listed CWE-862
TI-2026-13289 CVE-2026-15796 · GHSA-g6m8-3ghv-56h7

Cross-site scripting in Builderall for WordPress

Priority LOW 28

The Builderall for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'bg_video_service_url' Setting in all versions up to, and including, 3.0.2 due to insufficient input sanitization and out…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00331 Published 2026-09-10 No fix listed CWE-79
TI-2026-17971 CVE-2026-22390 · GHSA-7hg2-6fhq-6jj6

WordPress Builderall Builder for WordPress plugin <= 3.0.1 - Remote Code Execution (RCE) vulnerability

Priority MEDIUM 44

Improper Control of Generation of Code ('Code Injection') vulnerability in Builderall Builderall Builder for WordPress builderall-cheetah-for-wp allows Code Injection.This issue affects Builderall Builder for WordPress:…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00545 Published 2026-03-05 No fix listed CWE-94
TI-2025-39135 CVE-2025-62987 · GHSA-3wcv-7wxv-gvf8

WordPress Builderall Builder for WordPress plugin <= 3.0.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Builderall Builderall Builder for WordPress builderall-cheetah-for-wp allows Stored XSS.This issue affects Builderall…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00165 Published 2025-10-27 No fix listed CWE-79