Pagelayer kayıtları

pagelayer üreticisine ait 19 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 0
Düzeltme kaydı olan: %36,8
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

19 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
35İzleyin	CVE-2020-35944İstismar yok	An issue was discovered in the PageLayer plugin before 1.1.2 for WordPress.pagelayer · pagelayer · CWE-79 Kimlik doğrulamasız XSS CSRF	Yüksek8,8	—	%0,7	1 Oca 2021
35İzleyin	CVE-2024-30465İstismar yok	WordPress PageLayer plugin <= 1.8.1 - Broken Access Control vulnerabilitypagelayer · pagelayer · CWE-862 Erişim denetimi (IDOR)	Yüksek8,8	—	%0,4	9 Haz 2024
29İzleyin	CVE-2020-35947İstismar yok	An issue was discovered in the PageLayer plugin before 1.1.2 for WordPress.pagelayer · pagelayer · CWE-79 XSS	Yüksek7,4	—	%1,1	1 Oca 2021
24İzleyin	CVE-2020-36384İstismar yok	PageLayer before 1.3.5 allows reflected XSS via color settings.pagelayer · pagelayer · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,8	7 Haz 2021
24İzleyin	CVE-2020-36383İstismar yok	PageLayer before 1.3.5 allows reflected XSS via the font-size parameter.pagelayer · pagelayer · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,8	7 Haz 2021
24İzleyin	CVE-2023-4687İstismar yok	PageLayer < 1.7.7 - Unauthenticated Stored XSSpagelayer · pagelayer · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,5	16 Eki 2023
21İzleyin	CVE-2023-5087İstismar yok	PageLayer < 1.7.8 - Author+ Stored XSSpagelayer · pagelayer · CWE-79 XSS	Orta5,4	—	%0,4	16 Eki 2023
21İzleyin	CVE-2024-2504İstismar yok	Page Builder: Pagelayer – Drag and Drop website builder <= 1.8.4 - Authenticated(Contributor+) Stored Cross-Site Scripting via custom attributespagelayer · pagelayer · CWE-79 XSS	Orta5,4	—	%0,4	9 Nis 2024
21İzleyin	CVE-2023-6738İstismar yok	PageLayer <= 1.7.8 - Authenticated(Contributor+) Stored Cross-Site Scripting via meta fieldspagelayer · pagelayer · CWE-20 XSS	Orta5,4	—	%0,4	4 Oca 2024
21İzleyin	CVE-2024-1590İstismar yok	Page Builder: Pagelayer – Drag and Drop website builder <= 1.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Buttonpagelayer · pagelayer · CWE-79 XSS	Orta5,4	—	%0,3	23 Şub 2024
21İzleyin	CVE-2024-2127İstismar yok	Page Builder: Pagelayer – Drag and Drop website builder <= 1.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Attributespagelayer · pagelayer · CWE-79 XSS	Orta5,4	—	%0,3	7 Mar 2024
19İzleyin	CVE-2023-7115İstismar yok	PageLayer < 1.8.1 - Admin+ Stored XSSpagelayer · pagelayer · CWE-79 XSS	Orta4,8	—	%0,4	27 Şub 2024
19İzleyin	CVE-2023-5124İstismar yok	PageLayer < 1.8.0 - Author+ Stored XSSpagelayer · pagelayer · CWE-79 XSS	Orta4,8	—	%0,3	29 Oca 2024
19İzleyin	CVE-2024-8618İstismar yok	Page Builder: Pagelayer < 1.9.0- Admin+ Stored XSSpagelayer · pagelayer · CWE-79 XSS	Orta4,8	—	%0,3	15 May 2025
19İzleyin	CVE-2024-8426İstismar yok	Pagelayer < 1.8.8 - Admin+ Stored XSSpagelayer · pagelayer · CWE-79 XSS	Orta4,8	—	%0,3	15 May 2025
19İzleyin	CVE-2024-43972İstismar yok	WordPress Page Builder: Pagelayer – Drag and Drop website builder plugin <= 1.8.7 - Cross Site Scripting (XSS) vulnerabilitypagelayer · pagelayer · CWE-79 XSS	Orta4,8	—	%0,3	17 Eyl 2024
17İzleyin	CVE-2024-13430İstismar yok	Page Builder: Pagelayer – Drag and Drop website builder <= 1.9.8 - Authenticated (Contributor+) Private Post Disclosure in pagelayer_builder_posts_shortcodepagelayer · pagelayer · CWE-284 Erişim denetimi (IDOR)	Orta4,3	—	%0,3	12 Mar 2025
17İzleyin	CVE-2025-2104İstismar yok	Page Builder: Pagelayer – Drag and Drop website builder <= 1.9.9 - Missing Authorization to Authenticated (Contributor+) Post Publicationpagelayer · pagelayer · CWE-862 Erişim denetimi (IDOR)	Orta4,3	—	%0,2	13 Mar 2025
17İzleyin	CVE-2025-1926İstismar yok	Page Builder: Pagelayer – Drag and Drop website builder <= 1.9.8 - Cross-Site Request Forgery (CSRF) To Post Contents Modificationpagelayer · pagelayer · CWE-352 Kimlik doğrulamasız CSRF	Orta4,3	—	%0,1	10 Mar 2025

CVE-2020-35944
35İzleyin
An issue was discovered in the PageLayer plugin before 1.1.2 for WordPress.
YüksekCVSS 8,8İstismar yokEPSS %0
pagelayer · pagelayer1 Oca 2021
CVE-2024-30465
35İzleyin
WordPress PageLayer plugin <= 1.8.1 - Broken Access Control vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0
- Erişim denetimi (IDOR)
pagelayer · pagelayer9 Haz 2024
CVE-2020-35947
29İzleyin
An issue was discovered in the PageLayer plugin before 1.1.2 for WordPress.
YüksekCVSS 7,4İstismar yokEPSS %1
- XSS
pagelayer · pagelayer1 Oca 2021
CVE-2020-36384
24İzleyin
PageLayer before 1.3.5 allows reflected XSS via color settings.
OrtaCVSS 6,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
pagelayer · pagelayer7 Haz 2021
CVE-2020-36383
24İzleyin
PageLayer before 1.3.5 allows reflected XSS via the font-size parameter.
OrtaCVSS 6,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
pagelayer · pagelayer7 Haz 2021
CVE-2023-4687
24İzleyin
PageLayer < 1.7.7 - Unauthenticated Stored XSS
OrtaCVSS 6,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
pagelayer · pagelayer16 Eki 2023
CVE-2023-5087
21İzleyin
PageLayer < 1.7.8 - Author+ Stored XSS
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
pagelayer · pagelayer16 Eki 2023
CVE-2024-2504
21İzleyin
Page Builder: Pagelayer – Drag and Drop website builder <= 1.8.4 - Authenticated(Contributor+) Stored Cross-Site Scripting via custom attributes
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
pagelayer · pagelayer9 Nis 2024
CVE-2023-6738
21İzleyin
PageLayer <= 1.7.8 - Authenticated(Contributor+) Stored Cross-Site Scripting via meta fields
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
pagelayer · pagelayer4 Oca 2024
CVE-2024-1590
21İzleyin
Page Builder: Pagelayer – Drag and Drop website builder <= 1.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
pagelayer · pagelayer23 Şub 2024
CVE-2024-2127
21İzleyin
Page Builder: Pagelayer – Drag and Drop website builder <= 1.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Attributes
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
pagelayer · pagelayer7 Mar 2024
CVE-2023-7115
19İzleyin
PageLayer < 1.8.1 - Admin+ Stored XSS
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
pagelayer · pagelayer27 Şub 2024
CVE-2023-5124
19İzleyin
PageLayer < 1.8.0 - Author+ Stored XSS
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
pagelayer · pagelayer29 Oca 2024
CVE-2024-8618
19İzleyin
Page Builder: Pagelayer < 1.9.0- Admin+ Stored XSS
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
pagelayer · pagelayer15 May 2025
CVE-2024-8426
19İzleyin
Pagelayer < 1.8.8 - Admin+ Stored XSS
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
pagelayer · pagelayer15 May 2025
CVE-2024-43972
19İzleyin
WordPress Page Builder: Pagelayer – Drag and Drop website builder plugin <= 1.8.7 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
pagelayer · pagelayer17 Eyl 2024
CVE-2024-13430
17İzleyin
Page Builder: Pagelayer – Drag and Drop website builder <= 1.9.8 - Authenticated (Contributor+) Private Post Disclosure in pagelayer_builder_posts_shortcode
OrtaCVSS 4,3İstismar yokEPSS %0
- Erişim denetimi (IDOR)
pagelayer · pagelayer12 Mar 2025
CVE-2025-2104
17İzleyin
Page Builder: Pagelayer – Drag and Drop website builder <= 1.9.9 - Missing Authorization to Authenticated (Contributor+) Post Publication
OrtaCVSS 4,3İstismar yokEPSS %0
- Erişim denetimi (IDOR)
pagelayer · pagelayer13 Mar 2025
CVE-2025-1926
17İzleyin
Page Builder: Pagelayer – Drag and Drop website builder <= 1.9.8 - Cross-Site Request Forgery (CSRF) To Post Contents Modification
OrtaCVSS 4,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
pagelayer · pagelayer10 Mar 2025