What’s Vulnerable › Products

Breakdance vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your Breakdance version is affected

Latest Breakdance vulnerabilities

• CVE-2026-65551 — WordPress Breakdance plugin < 2.7 - Broken Access Control vulnerability (CVSS 7.5)
• CVE-2026-57735 — WordPress Breakdance plugin <= 2.7.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2026-7543 — Breakdance <= 2.7.1 - Unauthenticated Stored Cross-Site Scripting via Webhook Action Details (CVSS 7.2)
• CVE-2024-5331 — Breakdance <= 1.7.2 - Missing Authorization (CVSS 4.3)
• CVE-2024-5330 — Breakdance <= 1.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 5.4)
• CVE-2024-4605 — Breakdance <= 1.7.1 - Authenticated (Contributor+) Remote Code Execution (CVSS 8.8)
• CVE-2023-6854 — Breakdance <= 1.7.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via custom postmeta (CVSS 6.4)
• CVE-2024-31390 — WordPress Breakdance plugin <= 1.7.2 - Authenticated Remote Code Execution (RCE) vulnerability (CVSS 9.9)