CVE-2020-36714

The Brizy plugin for WordPress is vulnerable to authorization bypass due to a incorrect capability check on the is_administrator() function in versions up to, and including, 1.0.125. This makes it possible for authenticated attackers to access and interact with available AJAX functions.

• CWE-285
• CWE-863

• https://blog.nintechnet.com/wordpress-brizy-page-builder-plugin-fixed-critical-vulnerabilities/Exploit, Third Party Advisory
• https://www.wordfence.com/threat-intel/vulnerabilities/id/9495e25d-a5a6-4f25-9363-783626e58a4a?source=cveThird Party Advisory
• https://blog.nintechnet.com/wordpress-brizy-page-builder-plugin-fixed-critical-vulnerabilities/Exploit, Third Party Advisory
• https://www.wordfence.com/threat-intel/vulnerabilities/id/9495e25d-a5a6-4f25-9363-783626e58a4a?source=cveThird Party Advisory

Published

Oct 20, 2023

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-36709The Page Builder: KingComposer plugin for WordPress is vulne…4.8
• CVE-2020-3671Use-after-free issue could occur due to dangling pointer whe…9.8
• CVE-2020-36710The WPS Hide Login plugin for WordPress is vulnerable to log…7.5
• CVE-2020-36711The Avada theme for WordPress is vulnerable to Stored Cross-…5.4
• CVE-2020-36712The Kali Forms plugin for WordPress is vulnerable to Unauthe…5.3
• CVE-2020-36713The MStore API plugin for WordPress is vulnerable to authent…9.8
• CVE-2020-36715The Login/Signup Popup plugin for WordPress is vulnerable to…4.6
• CVE-2020-36716The WP Activity Log plugin for WordPress is vulnerable to au…7.3
• CVE-2020-36717The Kali Forms plugin for WordPress is vulnerable to Cross-S…8.8
• CVE-2020-36718The GDPR CCPA Compliance Support plugin for WordPress is vul…9.8
• CVE-2020-36719The ListingPro - WordPress Directory & Listing Theme for Wor…9.8
• CVE-2020-36720The Kali Forms plugin for WordPress is vulnerable to Authent…7.1