Skip to content
OpenAdvisories

Vendor

Breakdance

5 known vulnerabilities.

Products

Breakdance 5
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.3
    CVE-2024-5331

    Breakdance <= 1.7.2 - Missing Authorization

    The Breakdance plugin for WordPress is vulnerable to unauthorized access of data in all versions up to, and including, 1.7.2. This makes it possible for authenticated attackers, with Contributor-level access and above, to export form submissions.

    Breakdance Breakdance Web / CMS
  • Medium 6.4
    CVE-2024-5330

    Breakdance <= 1.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The Breakdance plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the breakdance_css_file_paths_cache parameter in all versions up to, and including, 1.7.2 due to insufficient input sanitization and output escaping. This makes it possible f…

    Breakdance Breakdance Web / CMS
  • Medium 6.4
    CVE-2023-6854

    Breakdance <= 1.7.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via custom postmeta

    The Breakdance plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's custom postmeta output in all versions up to, and including, 1.7.0 due to insufficient input sanitization and output escaping on user supplied post meta fields. …

    Breakdance Breakdance Web / CMS