WordPress Popup Builder Plugin <= 4.2.6 is vulnerable to Cross Site Scripting (XSS)

Software Popup Builder Type Plugin Vulnerable versions = 4.2.6 Fixed in 4.2.7 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-30184 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID be71da5ede09 Credits LVT-tholv2k Required privilege Contribut...

WordPress Funnel Builder by CartFlows Plugin <= 2.0.1 is vulnerable to Cross Site Scripting (XSS)

Software Funnel Builder by CartFlows Type Plugin Vulnerable versions = 2.0.1 Fixed in 2.0.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29813 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 52e759bcfda3 Credits LVT-tholv2k Required...

WordPress WC Builder Plugin <= 1.0.18 is vulnerable to Cross Site Scripting (XSS)

Software WC Builder Type Plugin Vulnerable versions = 1.0.18 Fixed in 1.0.19 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29926 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID a04b14c5f16a Credits LVT-tholv2k Required privilege Contributo...

WordPress Bold Page Builder Plugin <= 4.7.6 is vulnerable to Cross Site Scripting (XSS)

Software Bold Page Builder Type Plugin Vulnerable versions = 4.7.6 Fixed in 4.7.7 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-30179 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 767144e6c86c Credits LVT-tholv2k Required privilege...

WordPress PDF Builder for WPForms Plugin <= 1.2.88 is vulnerable to Cross Site Scripting (XSS)

Software PDF Builder for WPForms Type Plugin Vulnerable versions = 1.2.88 Fixed in 1.2.89 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29820 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 7f7911ba8d07 Credits LVT-tholv2k Required privile...

WordPress Page Builder by SiteOrigin Plugin <= 2.29.6 is vulnerable to Cross Site Scripting (XSS)

Software Page Builder by SiteOrigin Type Plugin Vulnerable versions = 2.29.6 Fixed in 2.29.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2202 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 92274a8f9656 Credits Webbernaut...

The vulnerability of the Bricks Builder plugin of the WordPress content management system allows a hacker to execute arbitrary code.

The vulnerability of the Bricks Builder plugin of the WordPress content management system is related to improper handling of code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2024-1049

The Page Builder Gutenberg Blocks – CoBlocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Icon Widget's in all versions up to, and including, 3.1.6 due to insufficient input sanitization and output escaping on the link value. This makes it possible for...

CVE-2024-2202

The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the legacy Image widget in all versions up to, and including, 2.29.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2024-2202

The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the legacy Image widget in all versions up to, and including, 2.29.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2024-2202

CVE-2024-2202 affects Page Builder by SiteOrigin for WordPress. It is a Stored XSS via the legacy Image widget in all versions up to 2.29.6, exploitable by authenticated users with contributor+ access to inject scripts executed when users view the affected pages. A fix exists in 2.29.7; update to...

CVE-2024-2202 Page Builder by SiteOrigin <= 2.29.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Legacy Image Widget

The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the legacy Image widget in all versions up to, and including, 2.29.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

OESA-2024-1302 docker security update

Docker is an open source project to build, ship and run any application as a lightweight container. Security Fixes: Moby is an open-source project created by Docker to enable software containerization. The classic builder cache system is prone to cache poisoning if the image is built FROM scratch...

PT-2024-19158 · Siteorigin · The Page Builder By Siteorigin

Name of the Vulnerable Software and Affected Versions: The Page Builder by SiteOrigin plugin for WordPress versions up to, and including, 2.29.6 Description: The issue is related to Stored Cross-Site Scripting via the legacy Image widget due to insufficient input sanitization and output escaping...

Gutenberg Blocks by Kadence Blocks – Page Builder Features < 3.2.26 - Contributor+ Stored XSS

Description The plugin does not validate and escape some of its attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admin...

Page Builder Gutenberg Blocks – CoBlocks < 3.1.7 - Contributor+ Stored XSS

Description The plugin does not validate and escape some of its attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admin...

Page Builder: Pagelayer – Drag and Drop website builder < 1.8.5 - Contributor+ Stored XSS

Description The plugin does not validate and escape some of its attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admin...

WordPress Cards for Beaver Builder Plugin <= 1.1.2 is vulnerable to Cross Site Scripting (XSS)

Software Cards for Beaver Builder Type Plugin Vulnerable versions = 1.1.2 Fixed in 1.1.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2305 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID f2cce6bd9382 Credits Francesco...

Page Builder by SiteOrigin < 2.29.7 - Contributor+ Stored XSS

Description The plugin does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admin...

CVE-2024-2129 WPBITS Addons For Elementor Page Builder <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

The WPBITS Addons For Elementor Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's heading widget in all versions up to, and including, 1.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible f...