Vulnerabilities > CVE-2020-36714 - Incorrect Authorization vulnerability in Brizy Brizy-Page Builder

CVSS 8.1 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

NONE

network

low complexity

brizy

CWE-863

NVD

Published: 2023-10-20

Updated: 2023-11-07

Summary

The Brizy plugin for WordPress is vulnerable to authorization bypass due to a incorrect capability check on the is_administrator() function in versions up to, and including, 1.0.125. This makes it possible for authenticated attackers to access and interact with available AJAX functions.

Vulnerable Configurations

Part	Description	Count
Application	Brizy Brizy Brizy Page Builder 0.1.0 Brizy Brizy Page Builder 0.2.0 Brizy Brizy Page Builder 0.2.5 Brizy Brizy Page Builder 1.0.0 Brizy Brizy Page Builder 1.0.1 Brizy Brizy Page Builder 1.0.1.125 Brizy Brizy Page Builder 1.0.2 Brizy Brizy Page Builder 1.0.3 Brizy Brizy Page Builder 1.0.4 Brizy Brizy Page Builder 1.0.5 Brizy Brizy Page Builder 1.0.6 Brizy Brizy Page Builder 1.0.7 Brizy Brizy Page Builder 1.0.8 Brizy Brizy Page Builder 1.0.9 Brizy Brizy Page Builder 1.0.10 Brizy Brizy Page Builder 1.0.11 Brizy Brizy Page Builder 1.0.12 Brizy Brizy Page Builder 1.0.13 Brizy Brizy Page Builder 1.0.14 Brizy Brizy Page Builder 1.0.15 Brizy Brizy Page Builder 1.0.16 Brizy Brizy Page Builder 1.0.17 Brizy Brizy Page Builder 1.0.18 Brizy Brizy Page Builder 1.0.19 Brizy Brizy Page Builder 1.0.20 Brizy Brizy Page Builder 1.0.21 Brizy Brizy Page Builder 1.0.22 Brizy Brizy Page Builder 1.0.23 Brizy Brizy Page Builder 1.0.24 Brizy Brizy Page Builder 1.0.25 Brizy Brizy Page Builder 1.0.26 Brizy Brizy Page Builder 1.0.28 Brizy Brizy Page Builder 1.0.29 Brizy Brizy Page Builder 1.0.30 Brizy Brizy Page Builder 1.0.31 Brizy Brizy Page Builder 1.0.32 Brizy Brizy Page Builder 1.0.33 Brizy Brizy Page Builder 1.0.34 Brizy Brizy Page Builder 1.0.35 Brizy Brizy Page Builder 1.0.36 Brizy Brizy Page Builder 1.0.37 Brizy Brizy Page Builder 1.0.38 Brizy Brizy Page Builder 1.0.39 Brizy Brizy Page Builder 1.0.40 Brizy Brizy Page Builder 1.0.41 Brizy Brizy Page Builder 1.0.42 Brizy Brizy Page Builder 1.0.43 Brizy Brizy Page Builder 1.0.44 Brizy Brizy Page Builder 1.0.45 Brizy Brizy Page Builder 1.0.46 Brizy Brizy Page Builder 1.0.47 Brizy Brizy Page Builder 1.0.48 Brizy Brizy Page Builder 1.0.49 Brizy Brizy Page Builder 1.0.50 Brizy Brizy Page Builder 1.0.51 Brizy Brizy Page Builder 1.0.52 Brizy Brizy Page Builder 1.0.53 Brizy Brizy Page Builder 1.0.54 Brizy Brizy Page Builder 1.0.56 Brizy Brizy Page Builder 1.0.57 Brizy Brizy Page Builder 1.0.58 Brizy Brizy Page Builder 1.0.59 Brizy Brizy Page Builder 1.0.60 Brizy Brizy Page Builder 1.0.61 Brizy Brizy Page Builder 1.0.62 Brizy Brizy Page Builder 1.0.63 Brizy Brizy Page Builder 1.0.64 Brizy Brizy Page Builder 1.0.65 Brizy Brizy Page Builder 1.0.66 Brizy Brizy Page Builder 1.0.67 Brizy Brizy Page Builder 1.0.68 Brizy Brizy Page Builder 1.0.69 Brizy Brizy Page Builder 1.0.70 Brizy Brizy Page Builder 1.0.71 Brizy Brizy Page Builder 1.0.72 Brizy Brizy Page Builder 1.0.73 Brizy Brizy Page Builder 1.0.74 Brizy Brizy Page Builder 1.0.75 Brizy Brizy Page Builder 1.0.76 Brizy Brizy Page Builder 1.0.77 Brizy Brizy Page Builder 1.0.78 Brizy Brizy Page Builder 1.0.79 Brizy Brizy Page Builder 1.0.80 Brizy Brizy Page Builder 1.0.81 Brizy Brizy Page Builder 1.0.82 Brizy Brizy Page Builder 1.0.83 Brizy Brizy Page Builder 1.0.84 Brizy Brizy Page Builder 1.0.85 Brizy Brizy Page Builder 1.0.86 Brizy Brizy Page Builder 1.0.87 Brizy Brizy Page Builder 1.0.88 Brizy Brizy Page Builder 1.0.89 Brizy Brizy Page Builder 1.0.91 Brizy Brizy Page Builder 1.0.92 Brizy Brizy Page Builder 1.0.93 Brizy Brizy Page Builder 1.0.94 Brizy Brizy Page Builder 1.0.95 Brizy Brizy Page Builder 1.0.96 Brizy Brizy Page Builder 1.0.97 Brizy Brizy Page Builder 1.0.98 Brizy Brizy Page Builder 1.0.99 Brizy Brizy Page Builder 1.0.100 Brizy Brizy Page Builder 1.0.101 Brizy Brizy Page Builder 1.0.102 Brizy Brizy Page Builder 1.0.103 Brizy Brizy Page Builder 1.0.104 Brizy Brizy Page Builder 1.0.105 Brizy Brizy Page Builder 1.0.106 Brizy Brizy Page Builder 1.0.107 Brizy Brizy Page Builder 1.0.108 Brizy Brizy Page Builder 1.0.109 Brizy Brizy Page Builder 1.0.110 Brizy Brizy Page Builder 1.0.111 Brizy Brizy Page Builder 1.0.112 Brizy Brizy Page Builder 1.0.113 Brizy Brizy Page Builder 1.0.114 Brizy Brizy Page Builder 1.0.115 Brizy Brizy Page Builder 1.0.116 Brizy Brizy Page Builder 1.0.117 Brizy Brizy Page Builder 1.0.118 Brizy Brizy Page Builder 1.0.119 Brizy Brizy Page Builder 1.0.120 Brizy Brizy Page Builder 1.0.121 Brizy Brizy Page Builder 1.0.122 Brizy Brizy Page Builder 1.0.123 Brizy Brizy Page Builder 1.0.124 Brizy Brizy Page Builder 1.0.125	127

Common Weakness Enumeration (CWE)

CWE-863 - Incorrect Authorization

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References