Known vulnerabilities in Brizy – Page Builder

A page builder that is fast & easy, Brizy is a next-gen website builder that anyone can use. No designer or developer skills required.

34Reported vulnerabilities

8.8Highest CVSS score

2.8.21Latest version

70,000+Active installs

What to do now

Update Brizy – Page Builder to 2.8.18 or later. 34 of these have a fixed version available. Updating resolves them.

Plugin last updated: July 28, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2020-36714	High 8.1	0.4%	1.0.125 and earlier	`1.0.126`	October 20, 2023
CVE-2022-2041	Medium 5.4	0.7%	Before 2.4.2	`2.4.2`	June 27, 2022
CVE-2022-2040	Medium 5.4	0.7%	Before 2.4.2	`2.4.2`	June 27, 2022
CVE-2024-1311	High 8.8	1.5%	0 to 2.4.40 (inclusive) 0 to 2.4.40 (inclusive)	`2.4.41`	March 13, 2024
CVE-2021-38346	High 8.8	1.7%	2.3.11 and earlier	`2.3.12`	October 13, 2021
CVE-2024-10960	High 8.8	0.9%	Before 2.6.5	`2.6.5`	February 12, 2025
CVE-2024-3242	High 8.8	1.0%	Before 2.4.45	`2.4.45`	July 18, 2024
CVE-2026-5324	High 7.2	0.4%	0 to 2.8.11 (inclusive)	`2.8.12`	May 2, 2026
CVE-2024-1165	Medium 6.5	0.8%	0 to 2.4.40 (inclusive)	`2.4.41`	February 26, 2024
CVE-2025-0969	Medium 6.5	0.4%	0 to 2.7.16 (inclusive)	`2.7.17`	December 13, 2025
CVE-2025-32198	Medium 6.4	0.3%	2.7.7 and earlier	`2.7.8`	April 4, 2025
CVE-2024-1937	Medium 6.5	0.4%	0 to 2.4.44 (inclusive)	`2.4.45`	July 16, 2024
CVE-2024-1293	Medium 6.4	0.4%	2.4.40 and earlier	`2.4.41`	February 23, 2024
CVE-2024-1291	Medium 6.4	0.4%	2.4.40 and earlier	`2.4.41`	February 23, 2024
CVE-2023-51396	Medium 6.4	0.3%	2.4.29 and earlier	`2.4.30`	November 6, 2023
CVE-2021-38344	Medium 6.4	0.6%	2.3.11 and earlier	`2.3.12`	October 13, 2021
WF-ba98a282-39ee-4a84-b988-ecfc0c4cd297	Medium 6.5	—	Before 1.0.114	`1.0.114`	March 5, 2020
CVE-2026-16068	Medium 6.4	0.1%	2.8.18 and earlier	`2.8.19`	July 27, 2026
CVE-2026-16069	Medium 6.4	0.2%	2.8.18 and earlier	`2.8.19`	July 27, 2026
CVE-2024-6254	Medium 6.1	0.3%	Before 2.5.2	`2.5.2`	August 8, 2024
CVE-2024-2087	Medium 6.1	0.4%	Before 2.4.44	`2.4.44`	June 5, 2024
CVE-2024-10322	Medium 5.4	0.4%	Before 2.6.9	`2.6.9`	February 12, 2025
CVE-2024-1164	Medium 5.4	0.3%	Before 2.4.44	`2.4.44`	June 5, 2024
CVE-2024-3667	Medium 5.4	0.3%	Before 2.4.44	`2.4.44`	June 5, 2024
CVE-2024-1940	Medium 5.4	0.3%	Before 2.4.42	`2.4.42`	June 5, 2024
CVE-2024-1161	Medium 5.4	0.3%	Before 2.4.44	`2.4.44`	June 5, 2024
CVE-2024-1296	Medium 5.4	0.5%	0 to 2.4.40 (inclusive)	`2.4.41`	March 13, 2024
CVE-2025-4370	Medium 5.3	0.3%	0 to 2.6.20 (inclusive)	`2.6.21`	July 29, 2025
CVE-2023-2897	Medium 5.3	0.3%	2.4.18 and earlier	`2.4.19`	June 9, 2023
CVE-2026-14195	Medium 4.3	0.2%	Before 2.8.18	`2.8.18`	August 1, 2026
CVE-2026-16070	Medium 4.3	0.2%	2.8.18 and earlier	`2.8.19`	July 27, 2026
CVE-2026-32408	Medium 4.3	0.2%	2.7.23 and earlier	`2.7.24`	February 22, 2026
CVE-2025-58594	Medium 4.3	0.2%	2.7.12 and earlier	`2.7.13`	September 3, 2025
CVE-2024-3711	Medium 4.3	0.3%	0 to 2.4.43 (inclusive)	`2.4.44`	May 23, 2024

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.