Access Control

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. Brizy < 1.0.126 - Authorization Bypass to Settings UpdatesCVE-2020-36714themefusecom · CVSS 7.4 · 0.5% likely

   CWE-285

2. Brizy – Page Builder <= 2.4.44 - Missing Authorization to Authenticated (Contributor+) Post ModificationCVE-2024-1937themefusecom · CVSS 7.1 · 0.4% likely

   CWE-862

3. Brizy – Page Builder <= 2.4.43 - Missing AuthorizationCVE-2024-3711themefusecom · CVSS 4.3 · 0.3% likely

   CWE-862

4. Brizy <= 2.6.20 - Missing Authorization to Unauthenticated Limited File UploadCVE-2025-4370themefusecom · CVSS 5.3 · 0.3% likely

   CWE-862

5. WordPress Brizy Plugin <= 2.7.12 - Broken Access Control VulnerabilityCVE-2025-58594themefusecom · CVSS 4.3 · 0.2% likely

   CWE-862

6. WordPress Brizy plugin <= 2.7.23 - Broken Access Control vulnerabilityCVE-2026-32408themefusecom · CVSS 4.3 · 0.2% likely

   CWE-862

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.