Vulnerabilities > CVE-2024-1937 - Missing Authorization vulnerability in Brizy

CVSS 6.5 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

NONE

Integrity impact

HIGH

Availability impact

NONE

network

low complexity

brizy

CWE-862

NVD

Published: 2024-07-16

Updated: 2025-01-16

Summary

The Brizy – Page Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'update_item' function in all versions up to, and including, 2.4.44. This makes it possible for authenticated attackers, with contributor access and above, to modify the content of arbitrary published posts, which includes the ability to insert malicious JavaScript.

Vulnerable Configurations

Part	Description	Count
Application	Brizy Brizy Brizy - Brizy Brizy 0.1.0 Brizy Brizy 0.2.0 Brizy Brizy 0.2.5 Brizy Brizy 1.0.0 Brizy Brizy 1.0.1 Brizy Brizy 1.0.1.125 Brizy Brizy 1.0.2 Brizy Brizy 1.0.3 Brizy Brizy 1.0.4 Brizy Brizy 1.0.5 Brizy Brizy 1.0.6 Brizy Brizy 1.0.7 Brizy Brizy 1.0.8 Brizy Brizy 1.0.9 Brizy Brizy 1.0.10 Brizy Brizy 1.0.11 Brizy Brizy 1.0.12 Brizy Brizy 1.0.13 Brizy Brizy 1.0.14 Brizy Brizy 1.0.15 Brizy Brizy 1.0.16 Brizy Brizy 1.0.17 Brizy Brizy 1.0.18 Brizy Brizy 1.0.19 Brizy Brizy 1.0.20 Brizy Brizy 1.0.21 Brizy Brizy 1.0.22 Brizy Brizy 1.0.23 Brizy Brizy 1.0.24 Brizy Brizy 1.0.25 Brizy Brizy 1.0.26 Brizy Brizy 1.0.28 Brizy Brizy 1.0.29 Brizy Brizy 1.0.30 Brizy Brizy 1.0.31 Brizy Brizy 1.0.32 Brizy Brizy 1.0.33 Brizy Brizy 1.0.34 Brizy Brizy 1.0.35 Brizy Brizy 1.0.36 Brizy Brizy 1.0.37 Brizy Brizy 1.0.38 Brizy Brizy 1.0.39 Brizy Brizy 1.0.40 Brizy Brizy 1.0.41 Brizy Brizy 1.0.42 Brizy Brizy 1.0.43 Brizy Brizy 1.0.44 Brizy Brizy 1.0.45 Brizy Brizy 1.0.46 Brizy Brizy 1.0.47 Brizy Brizy 1.0.48 Brizy Brizy 1.0.49 Brizy Brizy 1.0.50 Brizy Brizy 1.0.51 Brizy Brizy 1.0.52 Brizy Brizy 1.0.53 Brizy Brizy 1.0.54 Brizy Brizy 1.0.56 Brizy Brizy 1.0.57 Brizy Brizy 1.0.58 Brizy Brizy 1.0.59 Brizy Brizy 1.0.60 Brizy Brizy 1.0.61 Brizy Brizy 1.0.62 Brizy Brizy 1.0.63 Brizy Brizy 1.0.64 Brizy Brizy 1.0.65 Brizy Brizy 1.0.66 Brizy Brizy 1.0.67 Brizy Brizy 1.0.68 Brizy Brizy 1.0.69 Brizy Brizy 1.0.70 Brizy Brizy 1.0.71 Brizy Brizy 1.0.72 Brizy Brizy 1.0.73 Brizy Brizy 1.0.74 Brizy Brizy 1.0.75 Brizy Brizy 1.0.76 Brizy Brizy 1.0.77 Brizy Brizy 1.0.78 Brizy Brizy 1.0.79 Brizy Brizy 1.0.80 Brizy Brizy 1.0.81 Brizy Brizy 1.0.82 Brizy Brizy 1.0.83 Brizy Brizy 1.0.84 Brizy Brizy 1.0.85 Brizy Brizy 1.0.86 Brizy Brizy 1.0.87 Brizy Brizy 1.0.88 Brizy Brizy 1.0.89 Brizy Brizy 1.0.91 Brizy Brizy 1.0.92 Brizy Brizy 1.0.93 Brizy Brizy 1.0.94 Brizy Brizy 1.0.95 Brizy Brizy 1.0.96 Brizy Brizy 1.0.97 Brizy Brizy 1.0.98 Brizy Brizy 1.0.99 Brizy Brizy 1.0.100 Brizy Brizy 1.0.101 Brizy Brizy 1.0.102 Brizy Brizy 1.0.103 Brizy Brizy 1.0.104 Brizy Brizy 1.0.105 Brizy Brizy 1.0.106 Brizy Brizy 1.0.107 Brizy Brizy 1.0.108 Brizy Brizy 1.0.109 Brizy Brizy 1.0.110 Brizy Brizy 1.0.111 Brizy Brizy 1.0.112 Brizy Brizy 1.0.113 Brizy Brizy 1.0.114 Brizy Brizy 1.0.115 Brizy Brizy 1.0.116 Brizy Brizy 1.0.117 Brizy Brizy 1.0.118 Brizy Brizy 1.0.119 Brizy Brizy 1.0.120 Brizy Brizy 1.0.121 Brizy Brizy 1.0.122 Brizy Brizy 1.0.123 Brizy Brizy 1.0.124 Brizy Brizy 1.0.125 Brizy Brizy 1.0.126 Brizy Brizy 1.0.127 Brizy Brizy 2.0.1 Brizy Brizy 2.0.2 Brizy Brizy 2.0.3 Brizy Brizy 2.0.4 Brizy Brizy 2.0.5 Brizy Brizy 2.0.6 Brizy Brizy 2.0.7 Brizy Brizy 2.0.8 Brizy Brizy 2.0.9 Brizy Brizy 2.0.10 Brizy Brizy 2.0.12 Brizy Brizy 2.0.13 Brizy Brizy 2.0.14 Brizy Brizy 2.0.15 Brizy Brizy 2.0.16 Brizy Brizy 2.1.0 Brizy Brizy 2.1.2 Brizy Brizy 2.1.3 Brizy Brizy 2.1.4 Brizy Brizy 2.1.5 Brizy Brizy 2.2.0 Brizy Brizy 2.2.1 Brizy Brizy 2.2.2 Brizy Brizy 2.2.3 Brizy Brizy 2.2.4 Brizy Brizy 2.2.5 Brizy Brizy 2.2.6 Brizy Brizy 2.2.7 Brizy Brizy 2.2.8 Brizy Brizy 2.2.9.1 Brizy Brizy 2.2.10 Brizy Brizy 2.2.11 Brizy Brizy 2.2.12 Brizy Brizy 2.2.13 Brizy Brizy 2.2.14 Brizy Brizy 2.2.15 Brizy Brizy 2.2.16 Brizy Brizy 2.2.17 Brizy Brizy 2.2.18 Brizy Brizy 2.2.19 Brizy Brizy 2.2.20 Brizy Brizy 2.3.0 Brizy Brizy 2.3.1 Brizy Brizy 2.3.2 Brizy Brizy 2.3.3 Brizy Brizy 2.3.4 Brizy Brizy 2.3.5 Brizy Brizy 2.3.6 Brizy Brizy 2.3.7 Brizy Brizy 2.3.8 Brizy Brizy 2.3.9 Brizy Brizy 2.3.10 Brizy Brizy 2.3.11 Brizy Brizy 2.3.12 Brizy Brizy 2.3.13 Brizy Brizy 2.3.14 Brizy Brizy 2.3.15 Brizy Brizy 2.3.16 Brizy Brizy 2.3.17 Brizy Brizy 2.3.18 Brizy Brizy 2.3.19 Brizy Brizy 2.3.20 Brizy Brizy 2.3.21 Brizy Brizy 2.3.22 Brizy Brizy 2.3.23 Brizy Brizy 2.3.24 Brizy Brizy 2.3.25 Brizy Brizy 2.3.26 Brizy Brizy 2.3.27 Brizy Brizy 2.3.28 Brizy Brizy 2.3.29 Brizy Brizy 2.3.30 Brizy Brizy 2.3.31 Brizy Brizy 2.3.32 Brizy Brizy 2.3.33 Brizy Brizy 2.3.34 Brizy Brizy 2.3.35 Brizy Brizy 2.3.36 Brizy Brizy 2.3.37 Brizy Brizy 2.4.0 Brizy Brizy 2.4.1 Brizy Brizy 2.4.2 Brizy Brizy 2.4.3 Brizy Brizy 2.4.4 Brizy Brizy 2.4.5 Brizy Brizy 2.4.6 Brizy Brizy 2.4.7 Brizy Brizy 2.4.8 Brizy Brizy 2.4.9 Brizy Brizy 2.4.10 Brizy Brizy 2.4.11 Brizy Brizy 2.4.13 Brizy Brizy 2.4.15 Brizy Brizy 2.4.16 Brizy Brizy 2.4.17 Brizy Brizy 2.4.18 Brizy Brizy 2.4.19 Brizy Brizy 2.4.20 Brizy Brizy 2.4.21 Brizy Brizy 2.4.22 Brizy Brizy 2.4.23 Brizy Brizy 2.4.24 Brizy Brizy 2.4.25 Brizy Brizy 2.4.26 Brizy Brizy 2.4.27 Brizy Brizy 2.4.28 Brizy Brizy 2.4.29 Brizy Brizy 2.4.30 Brizy Brizy 2.4.31 Brizy Brizy 2.4.32 Brizy Brizy 2.4.33 Brizy Brizy 2.4.34 Brizy Brizy 2.4.35 Brizy Brizy 2.4.36 Brizy Brizy 2.4.37 Brizy Brizy 2.4.38 Brizy Brizy 2.4.39 Brizy Brizy 2.4.40 Brizy Brizy 2.4.41 Brizy Brizy 2.4.42 Brizy Brizy 2.4.43 Brizy Brizy 2.4.44	252

Common Weakness Enumeration (CWE)

CWE-862 - Missing Authorization

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References