Known Vulnerabilities for Builder by Frappe
Listed below are 10 of the newest known vulnerabilities associated with "Builder" by "Frappe".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-115807 json | The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vuln... | Not Provided | 2026-10-24 | 2026-10-24 |
| CVE-2026-115720 json | Frappe Builder before 1.36.1 contains a server-side request forgery vulnerability in builder/api.py where the assert_not_priv... | Not Provided | 2026-10-26 | 2026-10-26 |
| CVE-2026-115718 json | Frappe Builder versions 1.33.0 before1.36.0 contain a missing authorization vulnerability in the improve_prompt endpoint that... | Not Provided | 2026-10-26 | 2026-10-26 |
| CVE-2026-115717 json | Frappe Builder versions before 1.36.1 contain a server-side request forgery vulnerability in the convert_to_webp API endpoint... | Not Provided | 2026-10-26 | 2026-10-26 |
| CVE-2026-114652 json | A data-query-logic neutralization weakness in the update-statement construction component of the MongoDB C# Driver can cause ... | Not Provided | 2026-10-22 | 2026-10-22 |
| CVE-2026-114184 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPVibes Elementor Addon... | Not Provided | 2026-10-22 | 2026-10-22 |
| CVE-2026-113472 json | The Depicter — Popup & Slider Builder WordPress plugin before 4.8.2 does not properly validate uploaded files in its editor... | Not Provided | 2026-10-23 | 2026-10-23 |
| CVE-2026-112904 json | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. In versions 1.0.8.6 a... | Not Provided | 2026-10-23 | 2026-10-23 |
| CVE-2026-112242 json | Incorrect Privilege Assignment vulnerability in Cozmoslabs Profile Builder profile-builder allows Privilege Escalation.This i... | Not Provided | 2026-10-22 | 2026-10-22 |
| CVE-2026-112230 json | The Popup Builder WordPress plugin before 4.4.6 does not perform authorization checks before trashing popup content in a mai... | Not Provided | 2026-10-23 | 2026-10-23 |