Siteorigin

Page Builder

7 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2026-2448

  • EPSS 0.1%
  • Veröffentlicht 03.03.2026 02:16:10
  • Zuletzt bearbeitet 03.03.2026 21:52:29

The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.33.5 via the locate_template() function. This makes it possible for authenticated attackers, with Contributor-level acce...

5.4

CVE-2025-1459

  • EPSS 0.08%
  • Veröffentlicht 01.03.2025 07:15:10
  • Zuletzt bearbeitet 12.08.2025 17:01:47

The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Embedded Video(PB) widget in all versions up to, and including, 2.31.4 due to insufficient input sanitization and output escaping. This makes it ...

5.4

CVE-2024-12240

  • EPSS 0.22%
  • Veröffentlicht 14.01.2025 11:15:15
  • Zuletzt bearbeitet 12.08.2025 16:00:18

The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the row label parameter in all versions up to, and including, 2.31.0 due to insufficient input sanitization and output escaping. This makes it possib...

5.4

CVE-2024-4361

  • EPSS 0.36%
  • Veröffentlicht 21.05.2024 11:15:09
  • Zuletzt bearbeitet 12.08.2025 01:12:57

The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'siteorigin_widget' shortcode in all versions up to, and including, 2.29.15 due to insufficient input sanitization and output escaping o...

5.4

CVE-2024-2202

  • EPSS 0.13%
  • Veröffentlicht 23.03.2024 03:15:12
  • Zuletzt bearbeitet 13.02.2025 16:48:25

The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the legacy Image widget in all versions up to, and including, 2.29.6 due to insufficient input sanitization and output escaping. This makes it possib...

8.8

CVE-2020-13643

Exploit
  • EPSS 0.12%
  • Veröffentlicht 28.05.2020 04:15:13
  • Zuletzt bearbeitet 21.11.2024 05:01:40

An issue was discovered in the SiteOrigin Page Builder plugin before 2.10.16 for WordPress. The live editor feature did not do any nonce verification, allowing for requests to be forged on behalf of an administrator. The live_editor_panels_data $_POS...

8.8

CVE-2020-13642

Exploit
  • EPSS 0.12%
  • Veröffentlicht 28.05.2020 04:15:12
  • Zuletzt bearbeitet 21.11.2024 05:01:39

An issue was discovered in the SiteOrigin Page Builder plugin before 2.10.16 for WordPress. The action_builder_content function did not do any nonce verification, allowing for requests to be forged on behalf of an administrator. The panels_data $_POS...