themefusecom vulnerabilities

CVEs per yearBy the year they were published

1. 20232
2. 202415
3. 20256
4. 20264

Newest CVEs

• CVE-2026-14882

  Brizy <= 2.8.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'brizy-compiled-sections' Post Meta

  themefusecom · Brizy – Page Builder

  Medium6.4
• CVE-2026-2585

  Brizy – Page Builder <= 2.8.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'rootAttributes' Parameter

  themefusecom · Brizy – Page Builder

  Medium6.4
• CVE-2026-5324

  Brizy – Page Builder <= 2.8.11 - Unauthenticated Stored Cross-Site Scripting via FileUpload Field Value

  themefusecom · Brizy – Page Builder

  High7.2
• CVE-2026-32408

  WordPress Brizy plugin <= 2.7.23 - Broken Access Control vulnerability

  themefusecom · Brizy

  Medium4.3
• CVE-2025-0969

  Brizy – Page Builder <= 2.7.16 - Authenticated (Contributor+) Sensitive Information Exposure via get_users Function

  themefusecom · Brizy – Page Builder

  Medium6.5
• CVE-2025-58594

  WordPress Brizy Plugin <= 2.7.12 - Broken Access Control Vulnerability

  themefusecom · Brizy

  Medium4.3
• CVE-2025-4370

  Brizy <= 2.6.20 - Missing Authorization to Unauthenticated Limited File Upload

  themefusecom · Brizy – Page Builder

  Medium5.3
• CVE-2025-32198

  WordPress Brizy plugin <= 2.7.7 - Cross Site Scripting (XSS) vulnerability

  themefusecom · Brizy

  Medium6.5
• CVE-2024-10322

  Brizy – Page Builder <= 2.6.8 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

  themefusecom · Brizy – Page Builder

  Medium6.4
• CVE-2024-10960

  Brizy – Page Builder <= 2.6.4 - Authenticated (Contributor+) Arbitrary File Upload via storeUploads

  themefusecom · Brizy – Page Builder

  Critical9.9