Page Builder by SiteOrigin

siteorigin-panels · plugin

Known security vulnerabilities for Page Builder by SiteOrigin. Find out in seconds which version runs on your site with WP Lens.

9 known vulnerabilities

latest Sep 30, 2026

Vulnerabilities

CVE-2026-2448
Page Builder by SiteOrigin <= 2.33.5 - Authenticated (Contributor+) Local File Inclusion
High 8.8
CVE-2020-13643
An issue was discovered in the SiteOrigin Page Builder plugin before 2.10.16 for WordPress.
High 8.8
CVE-2020-13642
An issue was discovered in the SiteOrigin Page Builder plugin before 2.10.16 for WordPress.
High 8.8
CVE-2026-97256
WordPress Page Builder by SiteOrigin plugin <= 2.36.0 - PHP Object Injection vulnerability
High 7.2
CVE-2026-13295
Page Builder by SiteOrigin <= 2.34.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via panels_data Parameter
Medium 6.4
CVE-2025-1459
Page Builder by SiteOrigin <= 2.31.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium 5.4
CVE-2024-12240
Page Builder by SiteOrigin <= 2.31.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Row Label Parameter
Medium 5.4
CVE-2024-4361
Page Builder by SiteOrigin <= 2.29.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'siteorigin_widget' Shortcode
Medium 5.4
CVE-2024-2202
Page Builder by SiteOrigin <= 2.29.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Legacy Image Widget
Medium 5.4