CVE-2026-110507

The Page Builder by SiteOrigin WordPress plugin, in versions prior to 2.38.0 , contains a vulnerability where it fails to restrict query arguments in the Post Loop widget . Because the plugin does not limit the loop to posts the user is authorized to view, users with the contributor role or highe...