Log out
Get PRO

Latest

Input validation vulnerability in WP Builder 3.0.7

  • Severity: medium-risk
  • Status: Open
  • Publication: October 9, 2024

The WP Builder plugin for WordPress has a security issue that allows hackers to inject harmful code into web pages. This can happen when they upload SVG files, and it affects all versions up to 3.0.7. This vulnerability is due to a lack of proper protection against malicious inputs. It means that attackers with Author-level access or higher can insert their own scripts into pages, which will run whenever someone views the SVG file.

Detected in:

WP Builder open vulnerable versions: >= * <= 3.0.7

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.