PatchTheCVEbrizy vulnerabilities and fixes
Recent CVEs affecting brizy, with upgrade or downgrade steps. 16 tracked.
brizy has 16 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 16. Most recent: 2025-07-29. Highest priority: CVE-2024-10960 (score 50/100).
- CVE-2025-4370 MEDIUM 5.3 UPGRADE The Brizy – Page Builder plugin for WordPress is vulnerable to limited file uploads due to missing authorizati
- CVE-2025-32198 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themefus
- CVE-2025-26902 MEDIUM 4.3 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in Brizy Brizy Pro allows Cross Site Request Forgery.This issu
- CVE-2025-26901 MEDIUM 4.3 UPGRADE Missing Authorization vulnerability in Brizy Brizy Pro allows Exploiting Incorrectly Configured Access Control
- CVE-2025-22763 HIGH 7.1 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound
- CVE-2024-6254 MEDIUM 4.3 UPGRADE The Brizy – Page Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up t
- CVE-2024-3711 MEDIUM 4.3 UPGRADE The Brizy – Page Builder plugin for WordPress is vulnerable to unauthorized plugin setting update due to a mis
- CVE-2024-3667 HIGH 7.4 UPGRADE The Brizy – Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Link To' f
- CVE-2024-3242 HIGH 8.8 UPGRADE The Brizy – Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file exte
- CVE-2024-2087 HIGH 7.2 UPGRADE The Brizy – Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form name v
- CVE-2024-1940 HIGH 7.1 UPGRADE The Brizy – Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via post content in
- CVE-2024-1937 HIGH 7.1 UPGRADE The Brizy – Page Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a miss
- CVE-2024-1164 MEDIUM 6.4 UPGRADE The Brizy – Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's co
- CVE-2024-1161 MEDIUM 6.4 UPGRADE The Brizy – Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Cu
- CVE-2024-10960 CRITICAL 9.9 UPGRADE The Brizy – Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type
- CVE-2024-10322 MEDIUM 6.4 UPGRADE The Brizy – Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REST API SVG Fi
FAQ
How do I fix brizy vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is brizy being exploited right now?
None of the tracked brizy CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which brizy CVE should I patch first?
CVE-2024-10960 currently ranks highest (50/100): The Brizy – Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type.