Brizy (Unknown) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-08-04. Vendor: Unknown.

CVEs of Brizy

• CVE-2026-16069 - CVSS 6.8 (medium), 2026-08-04: The Brizy WordPress plugin before 2.8.19 does not sanitize or escape featured-image focal-point coordinates submitted through one of its AJAX actions before…
• CVE-2026-16070 - CVSS 2.7 (low), 2026-08-04: The Brizy WordPress plugin before 2.8.19 does not properly verify authorization on the object being modified before updating a template's type meta,…
• CVE-2026-16068 - CVSS 3.5 (low), 2026-08-04: The Brizy WordPress plugin before 2.8.19 does not properly restrict who can modify its site-global design data and does not sanitise part of that data before…
• CVE-2026-14195 - CVSS 2.7 (low), 2026-08-01: The Brizy WordPress plugin before 2.8.18 does not properly verify authorization on a request handler before returning post content, allowing users with the…