Skip to content
Noroxi

siteorigin records

16 published records for vendor siteorigin.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
12.5%
Median publish → KEV
No record has entered KEV

Records by year

  1. 20
  2. 23
  3. 24
  4. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

16 records
  • CVE-2020-13643
    35Monitor

    An issue was discovered in the SiteOrigin Page Builder plugin before 2.10.16 for WordPress.

    HighCVSS 8.8No exploitEPSS 1%

    siteorigin · page builderMay 28, 2020

  • CVE-2020-13642
    35Monitor

    An issue was discovered in the SiteOrigin Page Builder plugin before 2.10.16 for WordPress.

    HighCVSS 8.8No exploitEPSS 1%

    siteorigin · page builderMay 28, 2020

  • CVE-2024-54268
    35Monitor

    WordPress SiteOrigin Widgets Bundle plugin <= 1.64.0 - Broken Access Control vulnerability

    HighCVSS 8.8No exploitEPSS 1%

    siteorigin · siteorigin widgets bundleDec 13, 2024

  • CVE-2023-6295
    28Monitor

    so-widgets-bundle < 1.51.0 - Admin+ Local File Inclusion

    HighCVSS 7.2No exploitEPSS 1%

    siteorigin · siteorigin widgets bundleDec 18, 2023

  • CVE-2024-0961
    21Monitor

    SiteOrigin Widgets Bundle <= 1.58.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 1%

    siteorigin · siteorigin widgets bundleFeb 5, 2024

  • CVE-2024-1070
    21Monitor

    SiteOrigin Widgets Bundle <= 1.58.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 1%

    siteorigin · siteorigin widgets bundleFeb 28, 2024

  • CVE-2024-1723
    21Monitor

    SiteOrigin Widgets Bundle <= 1.58.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 1%

    siteorigin · siteorigin widgets bundleMar 13, 2024

  • CVE-2024-1058
    21Monitor

    SiteOrigin Widgets Bundle <= 1.58.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 0%

    siteorigin · siteorigin widgets bundleFeb 28, 2024

  • CVE-2024-2202
    21Monitor

    Page Builder by SiteOrigin <= 2.29.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Legacy Image Widget

    MediumCVSS 5.4No exploitEPSS 0%

    siteorigin · page builderMar 22, 2024

  • CVE-2024-5901
    21Monitor

    SiteOrigin Widgets Bundle <= 1.62.2 - Authenticated (Contributor+) Stored Cross-Site Scripting in Image Grid widget

    MediumCVSS 5.4No exploitEPSS 0%

    siteorigin · siteorigin widgets bundleJul 30, 2024

  • CVE-2024-4362
    21Monitor

    SiteOrigin Widgets Bundle <= 1.60.0 - - Authenticated (Contributor+) Stored Cross-Site Scripting via 'siteorigin_widget' Shortcode

    MediumCVSS 5.4No exploitEPSS 0%

    siteorigin · siteorigin widgets bundleMay 22, 2024

  • CVE-2024-4361
    21Monitor

    Page Builder by SiteOrigin <= 2.29.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'siteorigin_widget' Shortcode

    MediumCVSS 5.4No exploitEPSS 0%

    siteorigin · page builderMay 21, 2024

  • CVE-2024-12240
    21Monitor

    Page Builder by SiteOrigin <= 2.31.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Row Label Parameter

    MediumCVSS 5.4No exploitEPSS 0%

    siteorigin · page builderJan 14, 2025

  • CVE-2024-5090
    21Monitor

    SiteOrigin Widgets Bundle <= 1.61.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via SiteOrigin Blog Widget

    MediumCVSS 5.4No exploitEPSS 0%

    siteorigin · siteorigin widgets bundleJun 10, 2024

  • CVE-2025-1459
    21Monitor

    Page Builder by SiteOrigin <= 2.31.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 0%

    siteorigin · page builderMar 1, 2025

  • CVE-2025-5585
    21Monitor

    SiteOrigin Widgets Bundle <= 1.68.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via `data-url` DOM Element Attribute

    MediumCVSS 5.4No exploitEPSS 0%

    siteorigin · siteorigin widgets bundleJun 24, 2025