{"error":0,"message":null,"data":{"name":"Page Builder by SiteOrigin","plugin":"siteorigin-panels","link":"https:\/\/wordpress.org\/plugins\/siteorigin-panels\/","latest":"1785857040","closed":0,"closed_reason":null,"closed_date":null,"vulnerability":[{"uuid":"ad08a5a48aa24f7ede8f1557f65e95bafa58708343fe563ec26df72ca385776c","name":"Page Builder by SiteOrigin [siteorigin-panels] < 2.10.16","description":null,"operator":{"min_version":null,"min_operator":null,"max_version":"2.10.16","max_operator":"lt","unfixed":"0","closed":"0"},"source":[{"id":"CVE-2020-13642","name":"CVE-2020-13642","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2020-13642","description":"[en] An issue was discovered in the SiteOrigin Page Builder plugin before 2.10.16 for WordPress. The action_builder_content function did not do any nonce verification, allowing for requests to be forged on behalf of an administrator. The panels_data $_POST variable allows for malicious JavaScript to be executed in the victim's browser.","date":"2020-05-28"},{"id":"5d71faebc82c9659934889d6a81256a7e0e519dd","name":"WordPress Page Builder by SiteOrigin plugin <= 2.10.15 - Cross-Site Request Forgery (CSRF) vulnerability leading to Reflected Cross-Site Scripting (XSS)","link":"https:\/\/patchstack.com\/database\/vulnerability\/siteorigin-panels-\/wordpress-page-builder-by-siteorigin-plugin-2-10-15-cross-site-request-forgery-csrf-vulnerability-leading-to-reflected-cross-site-scripting-xss-1","description":"Cross-Site Request Forgery (CSRF) vulnerability leading to Reflected Cross-Site Scripting (XSS) discovered by WordFence in WordPress Page Builder by SiteOrigin plugin (versions <= 2.10.15).","date":"2020-05-11"},{"id":"7aa3571635d3c69ae34336dca0e8188c9fcbd50e","name":"Page Builder by SiteOrigin <= 2.10.15 - Cross-Site Request Forgery to Reflected Cross-Site Scripting","link":"https:\/\/www.wordfence.com\/threat-intel\/vulnerabilities\/wordpress-plugins\/siteorigin-panels\/page-builder-by-siteorigin-21015-cross-site-request-forgery-to-reflected-cross-site-scripting-2","description":"An issue was discovered in the SiteOrigin Page Builder plugin before 2.10.16 for WordPress. The action_builder_content function did not do any nonce verification, allowing for requests to be forged on behalf of an administrator. The panels_data $_POST variable allows for malicious JavaScript to be executed in the victim's browser.","date":"2020-05-05"},{"id":"48972e39554ec588668fb050bb2d903a2f2255db","name":"WordPress  Page Builder by SiteOrigin Plugin  <= 2.10.15 is vulnerable to Cross Site Request Forgery (CSRF)","link":"https:\/\/patchstack.com\/database\/wordpress\/plugin\/siteorigin-panels\/vulnerability\/wordpress-page-builder-by-siteorigin-plugin-2-10-15-cross-site-request-forgery-csrf-vulnerability-leading-to-reflected-cross-site-scripting-xss-1","description":"Update the WordPress Page Builder by SiteOrigin plugin to the latest available version (at least 2.10.16).\nWordFence discovered and reported this Cross Site Request Forgery (CSRF) vulnerability in WordPress Page Builder by SiteOrigin Plugin. This could allow a malicious actor to force higher privileged users to execute unwanted actions under their current authentication. This vulnerability has been fixed in version 2.10.16.","date":"2023-05-11"},{"id":"6de420d5-c1e6-40e4-ab30-da0e974716b5","name":"Page Builder by SiteOrigin &lt; 2.10.16 - CSRF to Reflected Cross-Site Scripting (XSS)","link":"https:\/\/wpscan.com\/vulnerability\/6de420d5-c1e6-40e4-ab30-da0e974716b5","description":"Flaws in the live editor and action_builder_content functions of the plugin &quot;allow attackers to forge requests on behalf of a site administrator and execute malicious code in the administrator&rsquo;s browser. The attacker needs to trick a site administrator into executing an action, like clicking a link or an attachment, for the attack to succeed.&quot;","date":null}],"impact":{"cvss":{"version":"3.1","vector":"CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:R\/S:U\/C:H\/I:H\/A:H","av":"n","ac":"l","pr":"n","ui":"r","s":"u","c":"h","i":"h","a":"h","score":"8.8","severity":"h","exploitable":"2.8","impact":"5.9"},"cvss3":{"version":"3.1","vector":"CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:R\/S:U\/C:H\/I:H\/A:H","score":"8.8","severity":"high","av":"network","ac":"low","pr":"none","ui":"required","s":"unchanged","c":"high","i":"high","a":"high","exploitable":"2.8","impact":"5.9"},"cwe":[{"cwe":"CWE-352","name":"Cross-Site Request Forgery (CSRF)","description":"The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor."}]}},{"uuid":"2bf5cac872860cab7d64f388cdf868acce554da47025a467d941dbba50e1e369","name":"Page Builder by SiteOrigin [siteorigin-panels] < 2.10.16","description":null,"operator":{"min_version":null,"min_operator":null,"max_version":"2.10.16","max_operator":"lt","unfixed":"0","closed":"0"},"source":[{"id":"CVE-2020-13643","name":"CVE-2020-13643","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2020-13643","description":"[en] An issue was discovered in the SiteOrigin Page Builder plugin before 2.10.16 for WordPress. The live editor feature did not do any nonce verification, allowing for requests to be forged on behalf of an administrator. The live_editor_panels_data $_POST variable allows for malicious JavaScript to be executed in the victim's browser.","date":"2020-05-28"},{"id":"75d94da88d1de9e05ab6fb06717f0adea163ecdd","name":"WordPress Page Builder by SiteOrigin plugin <= 2.10.15 - Cross-Site Request Forgery (CSRF) vulnerability leading to Reflected Cross-Site Scripting (XSS)","link":"https:\/\/patchstack.com\/database\/vulnerability\/siteorigin-panels-\/wordpress-page-builder-by-siteorigin-plugin-2-10-15-cross-site-request-forgery-csrf-vulnerability-leading-to-reflected-cross-site-scripting-xss","description":"Cross-Site Request Forgery (CSRF) vulnerability leading to Reflected Cross-Site Scripting (XSS) discovered by WordFence in WordPress Page Builder by SiteOrigin plugin (versions <= 2.10.15).","date":"2020-05-11"},{"id":"9a4b9259f95c0df706ca00d8148bcd2220240b6a","name":"Page Builder by SiteOrigin <= 2.10.15 - Cross-Site Request Forgery to Reflected Cross-Site Scripting","link":"https:\/\/www.wordfence.com\/threat-intel\/vulnerabilities\/wordpress-plugins\/siteorigin-panels\/page-builder-by-siteorigin-21015-cross-site-request-forgery-to-reflected-cross-site-scripting","description":"An issue was discovered in the SiteOrigin Page Builder plugin before 2.10.16 for WordPress. The live editor feature did not do any nonce verification, allowing for requests to be forged on behalf of an administrator. The live_editor_panels_data $_POST variable allows for malicious JavaScript to be executed in the victim's browser.","date":"2020-05-11"},{"id":"17870958a03a31270dbfd03df7f0057195a6ca0d","name":"WordPress  Page Builder by SiteOrigin Plugin  <= 2.10.15 is vulnerable to Cross Site Request Forgery (CSRF)","link":"https:\/\/patchstack.com\/database\/wordpress\/plugin\/siteorigin-panels\/vulnerability\/wordpress-page-builder-by-siteorigin-plugin-2-10-15-cross-site-request-forgery-csrf-vulnerability-leading-to-reflected-cross-site-scripting-xss","description":"Update the WordPress Page Builder by SiteOrigin plugin to the latest available version (at least 2.10.16).\nWordFence discovered and reported this Cross Site Request Forgery (CSRF) vulnerability in WordPress Page Builder by SiteOrigin Plugin. This could allow a malicious actor to force higher privileged users to execute unwanted actions under their current authentication. This vulnerability has been fixed in version 2.10.16.","date":"2023-05-11"}],"impact":{"cvss":{"version":"3.1","vector":"CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:R\/S:U\/C:H\/I:H\/A:H","av":"n","ac":"l","pr":"n","ui":"r","s":"u","c":"h","i":"h","a":"h","score":"8.8","severity":"h","exploitable":"2.8","impact":"5.9"},"cvss3":{"version":"3.1","vector":"CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:R\/S:U\/C:H\/I:H\/A:H","score":"8.8","severity":"high","av":"network","ac":"low","pr":"none","ui":"required","s":"unchanged","c":"high","i":"high","a":"high","exploitable":"2.8","impact":"5.9"},"cwe":[{"cwe":"CWE-352","name":"Cross-Site Request Forgery (CSRF)","description":"The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor."}]}},{"uuid":"81ae12a0045bd671f60215037cfaae2b6e67cf6af764c259ba04065d56c5a913","name":"Page Builder by SiteOrigin [siteorigin-panels] < 2.0.5","description":null,"operator":{"min_version":null,"min_operator":null,"max_version":"2.0.5","max_operator":"lt","unfixed":"0","closed":"0"},"source":[{"id":"f4e959e62611c9a76b68d0a4b11d6107fcb3a280","name":"WordPress Page Builder Plugin <= 2.0.3 - Reflected XSS","link":"https:\/\/patchstack.com\/database\/vulnerability\/siteorigin-panels-\/wordpress-page-builder-plugin-2-0-3-reflected-xss","description":"Because of this vulnerability, the attackers can inject arbitrary web script or HTML.\nUpdate the plugin.","date":"2015-01-12"}],"impact":[]},{"uuid":"84b513bf6e48af290b687c52496c6e20b955b9e17d5a0791860178af5957157a","name":"Page Builder by SiteOrigin [siteorigin-panels] < 2.0.5","description":null,"operator":{"min_version":null,"min_operator":null,"max_version":"2.0.5","max_operator":"lt","unfixed":"0","closed":"0"},"source":[{"id":"1e41e28d73ee07988103bc82e084fa9675c16627","name":"Page Builder by SiteOrigin < 2.0.5 - Reflected Cross-Site Scripting","link":"https:\/\/www.wordfence.com\/threat-intel\/vulnerabilities\/wordpress-plugins\/siteorigin-panels\/page-builder-by-siteorigin-205-reflected-cross-site-scripting","description":"The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018siteorigin_panels_render_form()\u2019 parameter in versions up to, and including, 2.0.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.","date":"2015-12-01"}],"impact":[]},{"uuid":"201e2f97cd424ddf742637a4cbf75c5ced107d847082dcd7b9a211f406857bba","name":"Page Builder by SiteOrigin [siteorigin-panels] < 2.0.5","description":null,"operator":{"min_version":null,"min_operator":null,"max_version":"2.0.5","max_operator":"lt","unfixed":"0","closed":"0"},"source":[{"id":"395bd7567550e3d71b57b01706f58dd6fd4e328b","name":"WordPress  Page Builder by SiteOrigin Plugin  <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)","link":"https:\/\/patchstack.com\/database\/wordpress\/plugin\/siteorigin-panels\/vulnerability\/wordpress-page-builder-plugin-2-0-3-reflected-xss","description":"Update the plugin.\nAn unknown person discovered and reported this Cross Site Scripting (XSS) vulnerability in WordPress Page Builder by SiteOrigin Plugin. This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site.  This vulnerability has been fixed in version 2.0.5.","date":"2023-01-12"}],"impact":[]},{"uuid":"0f8e7f5fb0c36a1f11f103ecde6f5439a42b377a8027e94729135da189d96fa7","name":"Page Builder by SiteOrigin [siteorigin-panels] < 2.0.5","description":null,"operator":{"min_version":null,"min_operator":null,"max_version":"2.0.5","max_operator":"lt","unfixed":"0","closed":"0"},"source":[{"id":"f0c92465-96cb-4497-8f00-9bee6acce78a","name":"Page Builder by SiteOrigin 2.0.3 - Reflected XSS","link":"https:\/\/wpscan.com\/vulnerability\/f0c92465-96cb-4497-8f00-9bee6acce78a","description":"The Page Builder by SiteOrigin WordPress plugin was affected by a Reflected XSS security vulnerability.","date":null}],"impact":[]},{"uuid":"95a9b88bfbcdef7a23244f88b7478930aef753ca312550593e90cdc7342cb9b5","name":"Page Builder by SiteOrigin [siteorigin-panels] < 2.29.7","description":null,"operator":{"min_version":null,"min_operator":null,"max_version":"2.29.7","max_operator":"lt","unfixed":"0","closed":"0"},"source":[{"id":"CVE-2024-2202","name":"CVE-2024-2202","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2024-2202","description":"[en] The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the legacy Image widget in all versions up to, and including, 2.29.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.","date":"2024-03-23"},{"id":"6334e134e5c8c338aee5c0142c4c1c2865c4afce","name":"Page Builder by SiteOrigin <= 2.29.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Legacy Image Widget","link":"https:\/\/www.wordfence.com\/threat-intel\/vulnerabilities\/wordpress-plugins\/siteorigin-panels\/page-builder-by-siteorigin-2296-authenticated-contributor-stored-cross-site-scripting-via-legacy-image-widget","description":"The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the legacy Image widget in all versions up to, and including, 2.29.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.","date":"2024-03-22"},{"id":"3dcf34f0d4c4397fcba9fea02128d6bf44a065dc","name":"WordPress  Page Builder by SiteOrigin Plugin    <= 2.29.6 is vulnerable to Cross Site Scripting (XSS)","link":"https:\/\/patchstack.com\/database\/wordpress\/plugin\/siteorigin-panels\/vulnerability\/wordpress-page-builder-by-siteorigin-plugin-2-29-6-authenticated-contributor-stored-cross-site-scripting-via-legacy-image-widget-vulnerability","description":"Update the WordPress Page Builder by SiteOrigin plugin to the latest available version (at least 2.29.7).\nWebbernaut discovered and reported this Cross Site Scripting (XSS) vulnerability in WordPress Page Builder by SiteOrigin Plugin. This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site.  This vulnerability has been fixed in version 2.29.7.\nHave additional information or questions about this entry? Get in touch.","date":null},{"id":"473d4c67-42cc-49de-bff5-5bff273b6c9d","name":"Page Builder by SiteOrigin &lt; 2.29.7 - Contributor+ Stored XSS","link":"https:\/\/wpscan.com\/vulnerability\/473d4c67-42cc-49de-bff5-5bff273b6c9d","description":"The plugin does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admin","date":null}],"impact":{"cvss":{"version":"3.1","vector":"CVSS:3.1\/AV:N\/AC:L\/PR:L\/UI:R\/S:C\/C:L\/I:L\/A:N","av":"n","ac":"l","pr":"l","ui":"r","s":"c","c":"l","i":"l","a":"n","score":"5.4","severity":"m","exploitable":"2.3","impact":"2.7"},"cvss3":{"version":"3.1","vector":"CVSS:3.1\/AV:N\/AC:L\/PR:L\/UI:R\/S:C\/C:L\/I:L\/A:N","score":"5.4","severity":"medium","av":"network","ac":"low","pr":"low","ui":"required","s":"changed","c":"low","i":"low","a":"none","exploitable":"2.3","impact":"2.7"},"cwe":[{"cwe":"CWE-79","name":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","description":"The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users."}],"ssvc":{"exploitation":"none","automatable":"no","technical_impact":"partial","kev":false,"kev_date":null}}},{"uuid":"cb6cc50b0b6a340d6d7ad8107db5166032b7305411bfce392f0818902f144a35","name":"Page Builder by SiteOrigin [siteorigin-panels] < 2.29.16","description":null,"operator":{"min_version":null,"min_operator":null,"max_version":"2.29.16","max_operator":"lt","unfixed":"0","closed":"0"},"source":[{"id":"CVE-2024-4361","name":"CVE-2024-4361","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2024-4361","description":"[en] The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'siteorigin_widget' shortcode in all versions up to, and including, 2.29.15 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.","date":"2024-05-21"},{"id":"31c30d8b2c36c02bf5a882d2f3b0ecc4925b456a","name":"WordPress Page Builder by SiteOrigin Plugin <= 2.29.15 is vulnerable to Cross Site Scripting (XSS)","link":"https:\/\/patchstack.com\/database\/wordpress\/plugin\/siteorigin-panels\/vulnerability\/wordpress-page-builder-by-siteorigin-plugin-2-29-15-authenticated-contributor-stored-cross-site-scripting-via-siteorigin-widget-shortcode-vulnerability","description":"<p>WordPress Page Builder by SiteOrigin Plugin <= 2.29.15 is vulnerable to Cross Site Scripting (XSS)<\/p><p>Software: Page Builder by SiteOrigin<\/p><p>Link: https:\/\/wordpress.org\/plugins\/siteorigin-panels\/#developers<\/p><p>Affected Version <= 2.29.15<\/p><p>Fixed in version 2.29.16 <\/p>","date":"2024-05-21"},{"id":"66d662aee78ca30524f675382e3193dba521854b","name":"Page Builder by SiteOrigin <= 2.29.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'siteorigin_widget' Shortcode","link":"https:\/\/www.wordfence.com\/threat-intel\/vulnerabilities\/wordpress-plugins\/siteorigin-panels\/page-builder-by-siteorigin-22915-authenticated-contributor-stored-cross-site-scripting-via-siteorigin-widget-shortcode","description":"The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'siteorigin_widget' shortcode in all versions up to, and including, 2.29.15 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.","date":"2024-05-20"}],"impact":{"cvss":{"version":"3.1","vector":"CVSS:3.1\/AV:N\/AC:L\/PR:L\/UI:R\/S:C\/C:L\/I:L\/A:N","av":"n","ac":"l","pr":"l","ui":"r","s":"c","c":"l","i":"l","a":"n","score":"5.4","severity":"m","exploitable":"2.3","impact":"2.7"},"cvss3":{"version":"3.1","vector":"CVSS:3.1\/AV:N\/AC:L\/PR:L\/UI:R\/S:C\/C:L\/I:L\/A:N","score":"5.4","severity":"medium","av":"network","ac":"low","pr":"low","ui":"required","s":"changed","c":"low","i":"low","a":"none","exploitable":"2.3","impact":"2.7"},"cwe":[{"cwe":"CWE-79","name":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","description":"The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users."}],"ssvc":{"exploitation":"none","automatable":"no","technical_impact":"partial","kev":false,"kev_date":null}}},{"uuid":"30630a80bc4d32485dfce053e6f498ef45833495a1f95f3529295f63fad90dda","name":"Page Builder by SiteOrigin [siteorigin-panels] < 2.31.1","description":null,"operator":{"min_version":null,"min_operator":null,"max_version":"2.31.1","max_operator":"lt","unfixed":"0","closed":"0"},"source":[{"id":"CVE-2024-12240","name":"CVE-2024-12240","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2024-12240","description":"[en] The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the row label parameter in all versions up to, and including, 2.31.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.","date":"2025-01-14"},{"id":"36a42a7b8218b79463228d58c24c8c61ef07adb3","name":"WordPress Page Builder by SiteOrigin Plugin <= 2.31.0 is vulnerable to Cross Site Scripting (XSS)","link":"https:\/\/patchstack.com\/database\/wordpress\/plugin\/siteorigin-panels\/vulnerability\/wordpress-page-builder-by-siteorigin-plugin-2-31-0-authenticated-contributor-stored-cross-site-scripting-via-row-label-parameter-vulnerability","description":"<p>WordPress Page Builder by SiteOrigin Plugin <= 2.31.0 is vulnerable to Cross Site Scripting (XSS)<\/p><p>Software: Page Builder by SiteOrigin<\/p><p>Fixed in version 2.31.1 <\/p><p>Affected Version <= 2.31.0<\/p><p>CVE: CVE-2024-12240<\/p>","date":"2025-01-13"},{"id":"efcf2bd63efdc16fc55c8ff5e9beeb510a80c6a5","name":"Page Builder by SiteOrigin <= 2.31.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Row Label Parameter","link":"https:\/\/www.wordfence.com\/threat-intel\/vulnerabilities\/wordpress-plugins\/siteorigin-panels\/page-builder-by-siteorigin-2310-authenticated-contributor-stored-cross-site-scripting-via-row-label-parameter","description":"The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the row label parameter in all versions up to, and including, 2.31.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.","date":"2025-01-13"},{"id":"EUVD-2024-50707","name":"EUVD-2024-50707","link":"https:\/\/euvd.enisa.europa.eu\/enisa\/EUVD-2024-50707","description":"The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the row label parameter in all versions up to, and including, 2.31.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.","date":"2025-01-14"}],"impact":{"cvss":{"version":"3.1","vector":"CVSS:3.1\/AV:N\/AC:L\/PR:L\/UI:N\/S:C\/C:L\/I:L\/A:N","av":"n","ac":"l","pr":"l","ui":"n","s":"c","c":"l","i":"l","a":"n","score":"6.4","severity":"m","exploitable":"2.3","impact":"2.7"},"cvss3":{"version":"3.1","vector":"CVSS:3.1\/AV:N\/AC:L\/PR:L\/UI:N\/S:C\/C:L\/I:L\/A:N","score":"6.4","severity":"medium","av":"network","ac":"low","pr":"low","ui":"none","s":"changed","c":"low","i":"low","a":"none","exploitable":"2.3","impact":"2.7"},"cwe":[{"cwe":"CWE-79","name":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","description":"The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users."}],"ssvc":{"exploitation":"none","automatable":"no","technical_impact":"partial","kev":false,"kev_date":null}}},{"uuid":"dac2d290d26a0e459233d6140ec575e7614ba4d8d32648025110d3b76e192959","name":"Page Builder by SiteOrigin [siteorigin-panels] < 2.31.5","description":null,"operator":{"min_version":null,"min_operator":null,"max_version":"2.31.5","max_operator":"lt","unfixed":"0","closed":"0"},"source":[{"id":"CVE-2025-1459","name":"Page Builder by SiteOrigin <= 2.31.4 - Authenticated (Contributor+) Stored Cross-Site Scripting","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2025-1459","description":"The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Embedded Video(PB) widget in all versions up to, and including, 2.31.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.","date":"0000-00-00"},{"id":"98645901d008112d0af8a2b631acc0ea04146ff4","name":"Page Builder by SiteOrigin <= 2.31.4 - Authenticated (Contributor+) Stored Cross-Site Scripting","link":"https:\/\/www.wordfence.com\/threat-intel\/vulnerabilities\/wordpress-plugins\/siteorigin-panels\/page-builder-by-siteorigin-2314-authenticated-contributor-stored-cross-site-scripting","description":"The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Embedded Video(PB) widget in all versions up to, and including, 2.31.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.","date":"2025-02-28"},{"id":"EUVD-2025-5900","name":"EUVD-2025-5900","link":"https:\/\/euvd.enisa.europa.eu\/enisa\/EUVD-2025-5900","description":"The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Embedded Video(PB) widget in all versions up to, and including, 2.31.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.","date":"2025-03-01"}],"impact":{"cvss":{"version":"3.1","vector":"CVSS:3.1\/AV:N\/AC:L\/PR:L\/UI:R\/S:C\/C:L\/I:L\/A:N","av":"n","ac":"l","pr":"l","ui":"r","s":"c","c":"l","i":"l","a":"n","score":"5.4","severity":"m","exploitable":"2.3","impact":"2.7"},"cvss3":{"version":"3.1","vector":"CVSS:3.1\/AV:N\/AC:L\/PR:L\/UI:R\/S:C\/C:L\/I:L\/A:N","score":"5.4","severity":"medium","av":"network","ac":"low","pr":"low","ui":"required","s":"changed","c":"low","i":"low","a":"none","exploitable":"2.3","impact":"2.7"},"cwe":[{"cwe":"CWE-79","name":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","description":"The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users."}],"ssvc":{"exploitation":"none","automatable":"no","technical_impact":"partial","kev":false,"kev_date":null}}},{"uuid":"18019c20041794ec9b1ceb8b3d896e096730f834577b53e30c7a23aa8fa17ffc","name":"Page Builder by SiteOrigin [siteorigin-panels] < 2.34.0","description":null,"operator":{"min_version":null,"min_operator":null,"max_version":"2.34.0","max_operator":"lt","unfixed":"0","closed":"0"},"source":[{"id":"CVE-2026-2448","name":"Page Builder by SiteOrigin <= 2.33.5 - Authenticated (Contributor+) Local File Inclusion","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-2448","description":"The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.33.5 via the locate_template() function. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other \u201csafe\u201d file types can be uploaded and included.","date":"0000-00-00"},{"id":"cbf10c96a4b90c93b1ed52f08feb4c73ab947189","name":"Page Builder by SiteOrigin <= 2.33.5 - Authenticated (Contributor+) Local File Inclusion","link":"https:\/\/www.wordfence.com\/threat-intel\/vulnerabilities\/wordpress-plugins\/siteorigin-panels\/page-builder-by-siteorigin-2335-authenticated-contributor-local-file-inclusion","description":"The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.33.5 via the locate_template() function. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other \u201csafe\u201d file types can be uploaded and included.","date":"2026-03-02"}],"impact":{"ssvc":{"exploitation":"none","automatable":"no","technical_impact":"total","kev":false,"kev_date":null}}},{"uuid":"8ec424f44eb96cbb5c7853b23ff7e499aeaad59263ca070292cbd5f4a9c54d22","name":"Page Builder by SiteOrigin [siteorigin-panels] < 2.34.4","description":null,"operator":{"min_version":null,"min_operator":null,"max_version":"2.34.4","max_operator":"lt","unfixed":"0","closed":"0"},"source":[{"id":"CVE-2026-13295","name":"CVE-2026-13295","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-13295","description":"[en] The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via panels_data Parameter in all versions up to, and including, 2.34.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This is possible because the nonce and edit_post capability checks enforced during save are both satisfied by Contributor-level users for their own posts, and the panels_data value is stored as post meta \u2014 outside the scope of WordPress's unfiltered_html carve-out \u2014 meaning no wp_kses fallback prevents the unsanitized WP_Widget_Custom_HTML content from being persisted and later rendered verbatim on the frontend.","date":"2026-06-27"},{"id":"8a0235eb252b3b64902c5bb5f51c95282137665c","name":"Page Builder by SiteOrigin <= 2.34.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via panels_data Parameter","link":"https:\/\/www.wordfence.com\/threat-intel\/vulnerabilities\/wordpress-plugins\/siteorigin-panels\/page-builder-by-siteorigin-2343-authenticated-contributor-stored-cross-site-scripting-via-panels-data-parameter","description":"The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via panels_data Parameter in all versions up to, and including, 2.34.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This is possible because the nonce and edit_post capability checks enforced during save are both satisfied by Contributor-level users for their own posts, and the panels_data value is stored as post meta \u2014 outside the scope of WordPress's unfiltered_html carve-out \u2014 meaning no wp_kses fallback prevents the unsanitized WP_Widget_Custom_HTML content from being persisted and later rendered verbatim on the frontend.","date":"2026-06-26"},{"id":"EUVD-2026-39955","name":"EUVD-2026-39955","link":"https:\/\/euvd.enisa.europa.eu\/enisa\/EUVD-2026-39955","description":"The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via panels_data Parameter in all versions up to, and including, 2.34.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This is possible because the nonce and edit_post capability checks enforced during save are both satisfied by Contributor-level users for their own posts, and the panels_data value is stored as post meta \u2014 outside the scope of WordPress's unfiltered_html carve-out \u2014 meaning no wp_kses fallback prevents the unsanitized WP_Widget_Custom_HTML content from being persisted and later rendered verbatim on the frontend.","date":"2026-06-27"}],"impact":{"cvss":{"version":"3.1","vector":"CVSS:3.1\/AV:N\/AC:L\/PR:L\/UI:N\/S:C\/C:L\/I:L\/A:N","av":"n","ac":"l","pr":"l","ui":"n","s":"c","c":"l","i":"l","a":"n","score":"6.4","severity":"m","exploitable":"0.0","impact":"0.0"},"cvss3":{"version":"3.1","vector":"CVSS:3.1\/AV:N\/AC:L\/PR:L\/UI:N\/S:C\/C:L\/I:L\/A:N","score":"6.4","severity":"medium","av":"network","ac":"low","pr":"low","ui":"none","s":"changed","c":"low","i":"low","a":"none","exploitable":"0.0","impact":"0.0"},"cwe":[{"cwe":"CWE-79","name":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","description":"The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users."}],"ssvc":{"exploitation":"none","automatable":"no","technical_impact":"partial","kev":false,"kev_date":null},"epss":"0.002"}}]},"updated":"1782723249"}