Siteorigin / Page Builder
6 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2025-1459 | Page Builder by SiteOrigin <= 2.31.4 - Authenticated (Contributor+) Stored Cross-Site Scripting | MEDIUM | 6.4 | Mar 1, 2025 |
| CVE-2024-12240 | Page Builder by SiteOrigin <= 2.31.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Row Label Parameter | MEDIUM | 6.4 | Jan 14, 2025 |
| CVE-2024-4361 | Page Builder by SiteOrigin <= 2.29.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'siteorigin_widget' Shortcode | MEDIUM | 6.4 | May 21, 2024 |
| CVE-2024-2202 | Page Builder by SiteOrigin <= 2.29.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Legacy Image Widget | MEDIUM | 6.4 | Mar 23, 2024 |
| CVE-2020-13642 | An issue was discovered in the SiteOrigin Page Builder plugin before 2.10.16 for WordPress. The action_builder_content function did not do any nonce verificati… | HIGH | 8.8 | May 28, 2020 |
| CVE-2020-13643 | An issue was discovered in the SiteOrigin Page Builder plugin before 2.10.16 for WordPress. The live editor feature did not do any nonce verification, allowing… | HIGH | 8.8 | May 28, 2020 |
Showing 1 to 6 of 6 CVEs