Builderall vulnerabilities
5 published CVEs name Builderall among the affected products.
- 5Published CVEs5 of them scored
- 4Last 12 monthspublished in the last year
- 1Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-15820
Builderall for WordPress <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Photo Module 'attributes' Setting
builderall · Builderall for WordPress
Medium6.4 - CVE-2026-15823
Builderall for WordPress <= 3.0.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Modification via 'ba_cheetah_data[post_id]' Parameter
builderall · Builderall for WordPress
Medium4.3 - CVE-2026-15796
Builderall for WordPress <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'bg_video_service_url' Setting
builderall · Builderall for WordPress
Medium6.4 - CVE-2026-22390
WordPress Builderall Builder for WordPress plugin <= 3.0.1 - Remote Code Execution (RCE) vulnerability
Builderall · Builderall Builder for WordPress
Critical9.9 - CVE-2025-62987
WordPress Builderall Builder for WordPress plugin <= 3.0.1 - Cross Site Scripting (XSS) vulnerability
Builderall · Builderall Builder for WordPress
Medium6.5