Builderall - vulnerabilities (CVEs)

5 CVEs in 2 products, 0 in the last 30 days, newest from 2026-09-10.

Products

CVE-2026-15820 - CVSS 6.4 (medium), 2026-09-10: The Builderall for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Photo Module 'attributes' Setting in all versions up to,…
CVE-2026-15823 - CVSS 4.3 (medium), 2026-09-10: The Builderall Cheetah For Wp plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the disable()…
CVE-2026-15796 - CVSS 6.4 (medium), 2026-09-10: The Builderall for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'bg_video_service_url' Setting in all versions up to, and…
CVE-2026-22390 - CVSS 9.9 (critical), 2026-03-05: Improper Control of Generation of Code ('Code Injection') vulnerability in Builderall Builderall Builder for WordPress builderall-cheetah-for-wp allows Code…
CVE-2025-62987 - CVSS 6.5 (medium), 2025-10-27: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Builderall Builderall Builder for WordPress…