Known vulnerabilities in the Builder plugin
16 security advisories have been published for the Builder plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Builder - Cross-Site Scripting (XSS) (CVE-2026-16654) MEDIUM
- Builder - Cross-Site Scripting (XSS) (CVE-2026-12536) MEDIUM
- Builder - Security Vulnerability (CVE-2026-1869) MEDIUM
- Builder - Remote Code Execution (CVE-2026-8713) CRITICAL
- Builder - Security Vulnerability (CVE-2026-7651) MEDIUM
- Builder - Cross-Site Scripting (XSS) (CVE-2026-1543) MEDIUM
- Builder - Path Traversal (CVE-2026-1509) MEDIUM
- Builder - Information Disclosure (CVE-2026-1541) MEDIUM
- Builder - SQL Injection (CVE-2026-1865) MEDIUM
- Builder - Cross-Site Scripting (XSS) (CVE-2025-6747) MEDIUM
- Builder - SQL Injection (CVE-2025-2890) MEDIUM
- Builder - Cross-Site Scripting (XSS) (CVE-2025-1665) MEDIUM
- Builder - Information Disclosure (CVE-2024-12335) MEDIUM
- Builder - Cross-Site Scripting (XSS) (CVE-2024-9385) MEDIUM
- Builder - Security Vulnerability (CVE-2024-7836) MEDIUM
- Builder - Open Redirect (CVE-2024-3032) MEDIUM