Log in Start free

Builderall

Products

ProductCVEsExploitedLatest
Builderall for WordPress3–Sep 10, 2026
Builderall Builder for WordPress2–Mar 5, 2026

Exploited and recent CVEs

  • CVE-2026-15820 Medium 6.4 Builderall for WordPress <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Photo Module 'attributes' Setting 0.3%
  • CVE-2026-15823 Medium 4.3 Builderall for WordPress <= 3.0.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Modification via 'ba_cheetah_data[post_id]' Parameter 0.3%
  • CVE-2026-15796 Medium 6.4 Builderall for WordPress <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'bg_video_service_url' Setting 0.3%
  • CVE-2026-22390 Critical 9.9 WordPress Builderall Builder for WordPress plugin <= 3.0.1 - Remote Code Execution (RCE) vulnerability 0.5%
  • CVE-2025-62987 Medium 6.5 WordPress Builderall Builder for WordPress plugin <= 3.0.1 - Cross Site Scripting (XSS) vulnerability 0.2%