BU
Vendor
builderall
5
CVEs
0
On KEV
0
New 30D
Products
BF6.4
Builderall for WordPress
builderall
3 CVEs0 on KEV0 new
BB9.9
Builderall Builder for WordPress
Builderall
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-15820 | BF Builderall for WordPress builderall | 6.4 | Sep 10 | Builderall for WordPress <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Photo Module 'attributes' Setting |
| CVE-2026-15823 | BF Builderall for WordPress builderall | 4.3 | Sep 10 | Builderall for WordPress <= 3.0.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Modification via 'ba_cheetah_data[post_id]' Parameter |
| CVE-2026-15796 | BF Builderall for WordPress builderall | 6.4 | Sep 10 | Builderall for WordPress <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'bg_video_service_url' Setting |
| CVE-2026-22390 | BB Builderall Builder for WordPress Builderall | 9.9 | Mar 5 | WordPress Builderall Builder for WordPress plugin <= 3.0.1 - Remote Code Execution (RCE) vulnerability |
| CVE-2025-62987 | BB Builderall Builder for WordPress Builderall | 6.5 | Oct 27 | WordPress Builderall Builder for WordPress plugin <= 3.0.1 - Cross Site Scripting (XSS) vulnerability |