Recherche « Unknown Export & Import WPBakery Page Builder »
1 CVE
Critique 0
Élevée 1
Moyenne 0
Faible 0
Non évaluée 0
Exploitées (KEV)
Tri : plus récentes
« Unknown Export & Import WPBakery Page Builder » ✕
-
CVE-2026-81429 7.1 Élevée
Unknown Export & Import WPBakery Page Builder
The Export & Import WPBakery Page Builder WordPress plugin through 1.0.2 does not perform any CSRF check on its template-import feature and does not sanitise the imported data before storing it and echoing it back, allowing attackers to make a logged-in administrator import a crafted template via a forged request that results in Stored Cross-Site Scripting executed in the administrator's session.