Cross-site Scripting

Every one of the 13 is a mark on the map. Named now: 1 to 13, most at risk first.

1. Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-1296themefusecom · CVSS 6.4 · 0.5% likely

   CWE-79

2. Brizy – Page Builder <= 2.8.11 - Unauthenticated Stored Cross-Site Scripting via FileUpload Field ValueCVE-2026-5324themefusecom · CVSS 7.2 · 0.4% likely

   CWE-79

3. Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-1293themefusecom · CVSS 6.4 · 0.4% likely

   CWE-79

4. Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-1291themefusecom · CVSS 6.4 · 0.4% likely

   CWE-79

5. Brizy – Page Builder <= 2.4.43 - Unauthenticated Stored Cross-Site Scripting via FormCVE-2024-2087themefusecom · CVSS 7.2 · 0.4% likely

   CWE-79

6. Brizy – Page Builder <= 2.6.8 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File UploadCVE-2024-10322themefusecom · CVSS 6.4 · 0.4% likely

   CWE-79

7. Brizy – Page Builder <= 2.4.43 - Authenticated (Contributor+) Store Cross-Site Scripting via Widget Link To URLCVE-2024-3667themefusecom · CVSS 7.4 · 0.3% likely

   CWE-79

8. WordPress Brizy plugin <= 2.7.7 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-32198themefusecom · CVSS 6.5 · 0.3% likely

   CWE-79

9. Brizy – Page Builder <= 2.4.41 - Authenticated(Contributor+) Stored Cross-Site ScriptingCVE-2024-1940themefusecom · CVSS 7.1 · 0.3% likely

   CWE-79

10. Brizy – Page Builder <= 2.8.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'rootAttributes' ParameterCVE-2026-2585themefusecom · CVSS 6.4 · 0.3% likely

    CWE-79

11. Brizy – Page Builder <= 2.4.43 - Authenticated(Contributor+) Stored Cross-Site Scripting via Form FunctionalityCVE-2024-1164themefusecom · CVSS 6.4 · 0.3% likely

    CWE-79

12. Brizy – Page Builder <= 2.4.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom AttributesCVE-2024-1161themefusecom · CVSS 6.4 · 0.3% likely

    CWE-79

13. Brizy <= 2.8.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'brizy-compiled-sections' Post MetaCVE-2026-14882themefusecom · CVSS 6.4 · 0.2% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.