CVE-2024-1165: Brizy

Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days.

The Brizy – Page Builder plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.4.39 via the 'id'. This makes it possible for authenticated attackers, with contributor-level access and above, to upload files to arbitrary locations on the server

Affected products

• Brizy Brizy: before 2.4.40 (fixed in 2.4.40)

Published 2024-02-26. Last modified 2026-06-17.