LightStart – Maintenance Mode, Coming Soon and Landing Page Builder Security: 23 Known Vulnerabilities

CVE-2026-1541 UNKNOWN EPSS 0.2%

Published 2026-04-15 · Affected: *

The Avada (Fusion) Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.15.1. This is due to the plugin's `fusion_get_post_custom_field(

CVE-2026-1509 UNKNOWN EPSS 0.2%

Published 2026-04-15 · Affected: *

The Avada (Fusion) Builder plugin for WordPress is vulnerable to Arbitrary WordPress Action Execution in all versions up to, and including, 3.15.1. This is due to the plugin's `output_action_hook()` f

CVE-2026-3645 UNKNOWN EPSS 0.2%

Published 2026-03-21 · Affected: *

The Punnel – Landing Page Builder plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.3.1. The save_config() function, which handles the 'punnel_save_co

CVE-2025-62083 UNKNOWN EPSS 0.2%

Published 2025-12-31 · Affected: *

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WP Messiah BoomDevs WordPress Coming Soon coming-soon-by-boomdevs allows Retrieve Embedded Sensitive Data.Th

CVE-2025-12934 UNKNOWN EPSS 0.3%

Published 2025-12-23 · Affected: *

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on the 'duplicate_wpml_layout' function

CVE-2025-0969 UNKNOWN EPSS 0.3%

Published 2025-12-13 · Affected: *

The Brizy – Page Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.7.16 via the get_users() function. This makes it possible for auth

CVE-2025-14119 UNKNOWN EPSS 0.1%

Published 2025-12-12 · Affected: *

The App Landing Template Blocks for WPBakery (Visual Composer) Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'atvc_video_play' shortcode in all versions up to,

CVE-2025-12558 UNKNOWN EPSS 0.3%

Published 2025-12-09 · Affected: *

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.9.4 via the 'get_attachment_sizes' function. Th

CVE-2025-12165 UNKNOWN EPSS 0.2%

Published 2025-12-05 · Affected: *

The Webcake – Landing Page Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'webcake_save_config' AJAX endpoint in all versions

CVE-2025-12782 UNKNOWN EPSS 0.2%

Published 2025-12-04 · Affected: *

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.9.4. This is due to the plugin not properly verifying a u

CVE-2025-11726 UNKNOWN EPSS 0.2%

Published 2025-12-02 · Affected: *

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 2.9.4. This is due to insufficient capability checks in th

CVE-2025-8897 UNKNOWN EPSS 0.1%

Published 2025-08-28 · Affected: *

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘'fl_builder' parameter in all versions up to, and including, 2.9.2.1 due to in

CVE-2024-4430 UNKNOWN EPSS 0.4%

Published 2024-05-14 · Affected: *

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the photo widget crop attribute in all versions up to, and including, 2.8.1.2 due to i

CVE-2024-3923 UNKNOWN EPSS 0.3%

Published 2024-05-14 · Affected: *

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the link_target parameter in all versions up to, and including, 2.8.1.1 due to insuffi

CVE-2024-2925 UNKNOWN EPSS 0.3%

Published 2024-04-02 · Affected: *

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Button Widget in all versions up to, and including, 2.8.0.5 due to insuff

CVE-2024-1080 UNKNOWN EPSS 0.3%