Description
WordPress Plugin Brizy-Page Builder is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently gain full access to the editor. WordPress Plugin Brizy-Page Builder version 1.0.125 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.0.126 or latest
References
Related Vulnerabilities
WordPress Plugin Community Events 'id' Parameter SQL Injection (1.2.2)
WordPress Plugin Spectra-WordPress Gutenberg Blocks Cross-Site Scripting (1.14.11)
WordPress Plugin Conditional Payments for WooCommerce Cross-Site Request Forgery (2.3.1)
WordPress Plugin Simplr Registration Form Plus+ Privilege Escalation (2.4.3)
Oracle Database Server CVE-2008-0347 Vulnerability (CVE-2008-0347)