Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
builderall-cheetah-for-wp
WordPress
· Plugin
7 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Builderall for WordPress <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Photo Module 'attributes' Setting
CVE-2026-15820
builderall-cheetah-for-wp
WordPress
Medium
No fix reported
2026-09-10
Builderall for WordPress <= 3.0.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Modification via 'ba_cheetah_data[post_id]' Parameter
CVE-2026-15823
builderall-cheetah-for-wp
WordPress
Medium
No fix reported
2026-09-10
Builderall for WordPress <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'bg_video_service_url' Setting
CVE-2026-15796
builderall-cheetah-for-wp
WordPress
Medium
No fix reported
2026-09-10
Builderall for WordPress <= 3.0.1 - Missing Authorization to Unauthenticated OAuth Update
CVE-2026-11882
builderall-cheetah-for-wp
WordPress
Medium
Fix reported
2026-08-17
Builderall for WordPress <= 3.0.1 - Authenticated (Contributor+) Remote Code Execution
CVE-2026-22390
builderall-cheetah-for-wp
WordPress
High
No fix reported
2026-03-05
Builderall Builder for WordPress <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-62987
builderall-cheetah-for-wp
WordPress
Medium
No fix reported
2025-10-29
Builderall Builder for WordPress <= 2.0.1 - Unauthenticated Server-Side Request Forgery
CVE-2024-30532
builderall-cheetah-for-wp
WordPress
High
Fix reported
2024-04-04
