Siteorigin Page Builder — known CVE vulnerabilities

Every CVE whose affected-product data names Siteorigin Page Builder, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2020-13642 — CVSS 8.8 (high): An issue was discovered in the SiteOrigin Page Builder plugin before 2.10.16 for WordPress. The action_builder_content function did not do…
• CVE-2020-13643 — CVSS 8.8 (high): An issue was discovered in the SiteOrigin Page Builder plugin before 2.10.16 for WordPress. The live editor feature did not do any nonce…
• CVE-2024-12240 — CVSS 6.4 (medium): The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the row label parameter in all…
• CVE-2024-2202 — CVSS 6.4 (medium): The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the legacy Image widget in all…
• CVE-2024-4361 — CVSS 6.4 (medium): The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'siteorigin_widget'…
• CVE-2025-1459 — CVSS 6.4 (medium): The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Embedded Video(PB) widget in all…