WordPress plugin
Page Builder with Image Map by AZEXO security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High0
- Medium4
- Low0
All Page Builder with Image Map by AZEXO vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode ≤1.27.133No patch available | CVE-2023-3051 | |
| Medium6.1 | Cross-Site Request Forgery to Stored Cross-Site Scripting via azh_save ≤1.27.133No patch available | CVE-2023-3055 | |
| Medium6.3 | Cross-Site Request Forgery to Post Creation/Modification/Deletion ≤1.27.133No patch available | CVE-2023-3052 | |
| Medium5.4 | Missing Authorization to Post Creation ≤1.27.133No patch available | CVE-2023-3053 |
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
≤1.27.133No patch available
- Medium6.1Cross-Site Request Forgery to Stored Cross-Site Scripting via azh_save
≤1.27.133No patch available
- Medium6.3Cross-Site Request Forgery to Post Creation/Modification/Deletion
≤1.27.133No patch available
- Medium5.4Missing Authorization to Post Creation
≤1.27.133No patch available
Page Builder with Image Map by AZEXO: common questions
Does Page Builder with Image Map by AZEXO have known vulnerabilities?
Yes. VulnCrest Radar lists 4 known vulnerabilities in Page Builder with Image Map by AZEXO: 4 medium. At least one is not fixed in the latest version.
How do I check which version of Page Builder with Image Map by AZEXO I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Page Builder with Image Map by AZEXO vulnerability?
CVE-2023-3051, published Jun 2, 2023: Page Builder by AZEXO <= 1.27.133 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode. Severity: Medium (CVSS 6.4).
Is any Page Builder with Image Map by AZEXO vulnerability listed in CISA KEV?
No. None of the known Page Builder with Image Map by AZEXO vulnerabilities is currently listed in the CISA KEV catalog.