Lucene search
K

28 matches found

RedhatCVE
RedhatCVE
added 2026/04/14 7:23 p.m.3 views

CVE-2026-39469

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Softaculous PageLayer pagelayer allows Retrieve Embedded Sensitive Data.This issue affects PageLayer: from n/a through = 2.0.8...

4.3CVSS5.8AI score0.00035EPSS
Exploits0References1
EUVD
EUVD
added 2026/04/08 9:31 a.m.3 views

EUVD-2026-20139

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Softaculous PageLayer pagelayer allows Retrieve Embedded Sensitive Data.This issue affects PageLayer: from n/a through = 2.0.8...

5.9AI score0.00035EPSS
Exploits0References2
NVD
NVD
added 2026/04/08 9:16 a.m.1 views

CVE-2026-39469

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Softaculous PageLayer pagelayer allows Retrieve Embedded Sensitive Data.This issue affects PageLayer: from n/a through = 2.0.8...

4.3CVSS0.00035EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/08 8:30 a.m.1 views

CVE-2026-39469

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Softaculous PageLayer pagelayer allows Retrieve Embedded Sensitive Data.This issue affects PageLayer: from n/a through = 2.0.8...

5.9AI score0.00035EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/03/29 11:13 a.m.1 views

CVE-2026-2442

The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Improper Neutralization of CRLF Sequences 'CRLF Injection' in all versions up to, and including, 2.0.7. This is due to the contact form handler performing placeholder substitution on...

5.3CVSS6AI score0.00152EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:12 a.m.10 views

CVE-2024-2127

The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom attributes in all versions up to, and including, 1.8.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

6.4CVSS5.8AI score0.00082EPSS
Exploits0References1
EUVD
EUVD
added 2025/11/13 3:27 a.m.2 views

EUVD-2025-150410

The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.0.5 via the pagelayerreplacepage function due to missing validation on a user controlled key. This makes it possible for...

4.3CVSS5AI score0.00034EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2020-23915

Malware in sbrugna...

6.1CVSS6.3AI score0.0021EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2020-23914

Malware in sbrugna...

6.1CVSS6.3AI score0.0021EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-27091

Malicious code in bioql PyPI...

6.4CVSS7.2AI score0.00082EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-58951

Malicious code in bioql PyPI...

5.4CVSS6.6AI score0.0012EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-40621

Malicious code in bioql PyPI...

5.9CVSS6.6AI score0.00158EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/26 5:14 a.m.8 views

CVE-2025-4223

The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘loginurl’ parameter in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping. This makes it possible for...

4.7CVSS6.2AI score0.00393EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/05/24 1:41 a.m.16 views

CVE-2024-13427 Page Builder: Pagelayer – Drag and Drop website builder <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Link

The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Button widget in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This mak...

6.4CVSS0.00164EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 11:39 a.m.3 views

CVE-2025-24573

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Softaculous PageLayer pagelayer allows DOM-Based XSS.This issue affects PageLayer: from n/a through = 1.9.4...

6.5CVSS7.2AI score0.00232EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 10:34 a.m.4 views

CVE-2024-43972

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Pagelayer Team PageLayer allows Stored XSS.This issue affects PageLayer: from n/a through 1.8.7...

5.9CVSS6.8AI score0.00158EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/22 5:2 p.m.5 views

CVE-2020-36384

PageLayer before 1.3.5 allows reflected XSS via color settings...

6.1CVSS5.9AI score0.0021EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/05/22 4:26 p.m.6 views

CVE-2020-36383

PageLayer before 1.3.5 allows reflected XSS via the font-size parameter...

6.1CVSS5.9AI score0.0021EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/03/15 5:4 a.m.14 views

CVE-2025-2104

The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to unauthorized post publication due to insufficient validation on the pagelayersavecontent function in all versions up to, and including, 1.9.8. This makes it possible for authenticated attackers, with...

4.3CVSS6.6AI score0.0003EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/03/13 12:0 a.m.1 views

WordPress plugin Page Builder: Pagelayer – Drag and Drop website builder 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin Page Builder: Pagelayer - Dra...

4.3CVSS8.3AI score0.0003EPSS
Exploits0References2
Rows per page
Query Builder