Page Builder By Siteorigin (Unknown) - vulnerabilities (CVEs)

2 CVEs, 2 in the last 30 days, 1 known versions, newest CVE from 2026-10-28. Vendor: Unknown.

CVEs of Page Builder By Siteorigin

• CVE-2026-110507 - CVSS 2.7 (low), 2026-10-28: The Page Builder by SiteOrigin WordPress plugin before 2.38.0 does not restrict the query arguments users can add to its Post Loop widget or limit the loop to…
• CVE-2026-110506 - CVSS 6.8 (medium), 2026-10-28: The Page Builder by SiteOrigin WordPress plugin before 2.38.0 does not sanitize or escape a widget property before storing it and outputting it in the page…