Vulnerabilities > Brainstormforce > Ultimate Addons FOR Beaver Builder > Medium

DATE CVE VULNERABILITY TITLE RISK
2024-03-30 CVE-2024-2140 Cross-site Scripting vulnerability in Brainstormforce Ultimate Addons for Beaver Builder
The Ultimate Addons for Beaver Builder – Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Advanced Icons widget in all versions up to, and including, 1.5.7 due to insufficient input sanitization and output escaping.
network
low complexity
brainstormforce CWE-79
5.4
2024-03-30 CVE-2024-2141 Cross-site Scripting vulnerability in Brainstormforce Ultimate Addons for Beaver Builder
The Ultimate Addons for Beaver Builder – Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Button widget in all versions up to, and including, 1.5.7 due to insufficient input sanitization and output escaping.
network
low complexity
brainstormforce CWE-79
5.4
2024-03-30 CVE-2024-2142 Cross-site Scripting vulnerability in Brainstormforce Ultimate Addons for Beaver Builder
The Ultimate Addons for Beaver Builder – Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Info Table widget in all versions up to, and including, 1.5.7 due to insufficient input sanitization and output escaping.
network
low complexity
brainstormforce CWE-79
5.4
2024-03-30 CVE-2024-2143 Cross-site Scripting vulnerability in Brainstormforce Ultimate Addons for Beaver Builder
The Ultimate Addons for Beaver Builder – Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Heading widget in all versions up to, and including, 1.5.7 due to insufficient input sanitization and output escaping.
network
low complexity
brainstormforce CWE-79
5.4
2024-03-30 CVE-2024-2144 Cross-site Scripting vulnerability in Brainstormforce Ultimate Addons for Beaver Builder
The Ultimate Addons for Beaver Builder – Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Separator widget in all versions up to, and including, 1.5.7 due to insufficient input sanitization and output escaping.
network
low complexity
brainstormforce CWE-79
5.4
2024-01-17 CVE-2023-23882 Unspecified vulnerability in Brainstormforce Ultimate Addons for Beaver Builder 1.5.5
Missing Authorization vulnerability in Brainstorm Force Ultimate Addons for Beaver Builder – Lite.This issue affects Ultimate Addons for Beaver Builder – Lite: from n/a through 1.5.5.
network
low complexity
brainstormforce
4.3