Brizy CVE-2023-44472

MEDIUM

Missing Authorization (CWE-862)

2024-05-03 audit@patchstack.com

Authentication Bypass Brizy Unyson

4.3

CVSS 3.1 · NVD

Share

Severity by source

NVD PRIMARY

4.3 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

None

Lifecycle Timeline

1

CVE Published

May 03, 2024 - 08:15 cve.org

MEDIUM 4.3

DescriptionCVE.org

Missing Authorization vulnerability in ThemeFuse Unyson.This issue affects Unyson: from n/a through 2.7.28.

AnalysisAI

Missing Authorization vulnerability in ThemeFuse Unyson.7.28. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Missing Authorization (CWE-862), which allows attackers to access resources or perform actions without proper authorization checks. Missing Authorization vulnerability in ThemeFuse Unyson.7.28. Affected products include: Brizy Unyson. Version information: through 2.7.28..

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Implement role-based access control, validate authorization on every request server-side, apply principle of least privilege.

More in Brizy

View all

CVE-2020-36714 HIGH This Week POC

The Brizy plugin for WordPress is vulnerable to authorization bypass due to a incorrect capability check on the is_admin

CVE-2022-2219 HIGH This Week POC

The Unyson WordPress plugin before 2.7.27 does not sanitise and escape a parameter before outputting it back in the page

CVE-2026-16069 MEDIUM This Month POC

Stored cross-site scripting in the Brizy WordPress plugin before 2.8.19 allows any authenticated user with Contributor r

CVE-2024-1311 HIGH This Week

The Brizy - Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validatio

CVE-2024-10960 CRITICAL Act Now

The Brizy - Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validatio

CVE-2024-3242 HIGH This Week

The Brizy - Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file extension vali

CVE-2022-2041 MEDIUM This Month POC

The Brizy WordPress plugin before 2.4.2 does not sanitise and escape some element content, which could allow users with

CVE-2022-2040 MEDIUM This Month POC

The Brizy WordPress plugin before 2.4.2 does not sanitise and escape some element URL, which could allow users with a ro

CVE-2021-38344 MEDIUM This Month POC

The Brizy Page Builder plugin <= 2.3.11 for WordPress was vulnerable to stored XSS by lower-privileged users such as a s

CVE-2021-38346 HIGH This Week

The Brizy Page Builder plugin <= 2.3.11 for WordPress allowed authenticated users to upload executable files to a locati

CVE-2024-2087 HIGH This Week

The Brizy - Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form name values in a

CVE-2026-16068 LOW Monitor POC

Stored XSS in the Brizy WordPress plugin (all versions before 2.8.19) allows authenticated Author-level users to inject

Same weakness CWE-862 – Missing Authorization

View all

CVE-2023-52163 HIGH POC

CVE-2025-6205 CRITICAL POC

CVE-2025-20362 HIGH POC

CVE-2017-9232 CRITICAL POC

CVE-2023-6875 CRITICAL POC

CVE-2024-4898 CRITICAL POC

CVE-2023-32117 CRITICAL POC

CVE-2020-36719 CRITICAL POC

Same technique Authentication Bypass

View all

CVE-2023-22515 CRITICAL POC

CVE-2012-4681 CRITICAL POC

CVE-2013-2465 CRITICAL POC

CVE-2011-3544 CRITICAL POC

CVE-2022-40684 CRITICAL POC

CVE-2025-61882 CRITICAL POC

CVE-2024-0012 CRITICAL POC

CVE-2023-46805 HIGH POC

Share

CVE-2023-44472 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy