Brizy – Page Builder, CVE-2020-36714

CVE, Research URL: CVE-2020-36714
Home page URL: Security reports for Brizy – Page Builder
Application: Brizy – Page Builder
Published on: Oct 20, 2023
Research Description: The Brizy plugin for WordPress is vulnerable to authorization bypass due to a incorrect capability check on the is_administrator() function in versions up to, and including, 1.0.125. This makes it possible for authenticated attackers to access and interact with available AJAX functions.
Affected versions: Min -, max 2.4.30.
Status: vulnerable

Brizy &#8211; Page Builder, CVE-2020-36714