Log in Start free

themefusecom

Products

ProductCVEsExploitedLatest
Brizy – Page Builder23–Oct 10, 2026
Brizy3–Mar 13, 2026
ThemeFuse Maintenance Mode1–Nov 19, 2024

Exploited and recent CVEs

  • CVE-2026-14882 Medium 6.4 Brizy <= 2.8.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'brizy-compiled-sections' Post Meta 0.2%
  • CVE-2026-2585 Medium 6.4 Brizy – Page Builder <= 2.8.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'rootAttributes' Parameter 0.3%
  • CVE-2026-5324 High 7.2 Brizy – Page Builder <= 2.8.11 - Unauthenticated Stored Cross-Site Scripting via FileUpload Field Value 0.4%
  • CVE-2026-32408 Medium 4.3 WordPress Brizy plugin <= 2.7.23 - Broken Access Control vulnerability 0.2%
  • CVE-2025-0969 Medium 6.5 Brizy – Page Builder <= 2.7.16 - Authenticated (Contributor+) Sensitive Information Exposure via get_users Function 0.4%
  • CVE-2025-58594 Medium 4.3 WordPress Brizy Plugin <= 2.7.12 - Broken Access Control Vulnerability 0.2%
  • CVE-2025-4370 Medium 5.3 Brizy <= 2.6.20 - Missing Authorization to Unauthenticated Limited File Upload 0.3%
  • CVE-2025-32198 Medium 6.5 WordPress Brizy plugin <= 2.7.7 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-10322 Medium 6.4 Brizy – Page Builder <= 2.6.8 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload 0.4%
  • CVE-2024-10960 Critical 9.9 Brizy – Page Builder <= 2.6.4 - Authenticated (Contributor+) Arbitrary File Upload via storeUploads 0.9%
  • CVE-2024-51645 High 7.1 WordPress ThemeFuse Maintenance Mode plugin <= 1.1.3 - CSRF to Stored XSS vulnerability 0.2%
  • CVE-2024-6254 Medium 4.3 Brizy – Page Builder <= 2.5.1 - Cross-Site Request Forgery 0.3%
  • CVE-2024-3242 High 8.8 Brizy – Page Builder <= 2.4.44 - Authenticated (Contributor+) Arbitrary File Upload 1.0%
  • CVE-2024-1937 High 7.1 Brizy – Page Builder <= 2.4.44 - Missing Authorization to Authenticated (Contributor+) Post Modification 0.4%
  • CVE-2024-1164 Medium 6.4 Brizy – Page Builder <= 2.4.43 - Authenticated(Contributor+) Stored Cross-Site Scripting via Form Functionality 0.3%
  • CVE-2024-3667 High 7.4 Brizy – Page Builder <= 2.4.43 - Authenticated (Contributor+) Store Cross-Site Scripting via Widget Link To URL 0.3%
  • CVE-2024-1940 High 7.1 Brizy – Page Builder <= 2.4.41 - Authenticated(Contributor+) Stored Cross-Site Scripting 0.3%
  • CVE-2024-2087 High 7.2 Brizy – Page Builder <= 2.4.43 - Unauthenticated Stored Cross-Site Scripting via Form 0.4%
  • CVE-2024-1161 Medium 6.4 Brizy – Page Builder <= 2.4.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Attributes 0.3%
  • CVE-2024-3711 Medium 4.3 Brizy – Page Builder <= 2.4.43 - Missing Authorization 0.3%
  • CVE-2024-1291 Medium 6.4 Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.4%
  • CVE-2024-1311 High 8.8 Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Arbitrary File Upload 1.5%
  • CVE-2024-1293 Medium 6.4 Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.4%
  • CVE-2024-1296 Medium 6.4 Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.5%
  • CVE-2024-1165 Medium 4.3 Brizy – Page Builder <= 2.4.39 - Authenticated (Contributor+) Directory Traversal 0.8%
  • CVE-2020-36714 High 7.4 Brizy < 1.0.126 - Authorization Bypass to Settings Updates 0.5%
  • CVE-2023-2897 Low 3.7 Brizy Page Builder <= 2.4.18 - IP Address Spoofing to Protection Mechanism Bypass 0.3%