What’s Vulnerable › Products

Builderall for WordPress vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your Builderall for WordPress version is affected

Latest Builderall for WordPress vulnerabilities

• CVE-2026-15823 — Builderall for WordPress <= 3.0.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Modification via 'ba_cheetah_data[post_id]' Parameter (CVSS 4.3)
• CVE-2026-15820 — Builderall for WordPress <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Photo Module 'attributes' Setting (CVSS 6.4)
• CVE-2026-15796 — Builderall for WordPress <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'bg_video_service_url' Setting (CVSS 6.4)