plugin

Nimble Builder Vulnerabilities

2 known security issues reported for the Nimble Builder WordPress plugin. Most recent disclosed Apr 11, 2022.

1 medium

Running Nimble Builder on your site? Check whether your installed version is affected.

Nimble Page Builder [nimble-builder] < 3.2.2

unknown

[en] The Nimble Page Builder WordPress plugin before 3.2.2 does not sanitise and escape the preview-level-guid parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting

Affected:: up to 3.2.2
Fixed in:: 3.2.2
Disclosed:: Apr 11, 2022

CVE-2022-0314 on NVD →

Nimble Page Builder <= 3.2.1 - Reflected Cross-Site Scripting

medium

The Nimble Page Builder WordPress plugin before 3.2.2 does not sanitise and escape the preview-level-guid parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting

CVSS:: 6.1
Affected:: up to 3.2.2
Fixed in:: 3.2.2
Disclosed:: Apr 8, 2022

CVE-2022-0314 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database