Skip to content
OpenAdvisories

Vendor

thethemefoundry

1 known vulnerabilities.

Products

Your Friendly Drag and Drop Page Builder — Make Builder 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.4
    CVE-2024-13856

    Make Builder <= 1.1.10 - Authenticated (Subscriber+) Server-Side Request Forgery via make_builder_ajax_subscribe Function

    The Your Friendly Drag and Drop Page Builder — Make Builder plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.1.10 via the make_builder_ajax_subscribe() function. This makes it possible for authenticated…

    thethemefoundry Your Friendly Drag and Drop Page Builder — Make Builder Web / CMS