Vulnerabilities / Page Builder by SiteOrigin
Page Builder by SiteOrigin vulnerabilities
Advisories WPSec published for Page Builder by SiteOrigin. Other sources may list more. Its attack surface: Page Builder by SiteOrigin on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-21 | WPSEC-2026-1345 | Page Builder by SiteOrigin <= 2.37.0 - Authenticated (Contributor+) Sensitive Information Exposure via Post Loop Widget | Medium 4.3 | 2.38.0 |
| 2026-10-21 | WPSEC-2026-1344 | Page Builder by SiteOrigin <= 2.37.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Class Name | Medium 6.4 | 2.38.0 |
| 2026-10-05 | WPSEC-2026-0433 | Page Builder by SiteOrigin <= 2.36.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'panels_data' Post Meta | Medium 6.4 | 2.37.0 |
License: CC BY 4.0