siteorigin kayıtları

siteorigin üreticisine ait 16 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 0
Düzeltme kaydı olan: %12,5
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

16 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
35İzleyin	CVE-2020-13643İstismar yok	An issue was discovered in the SiteOrigin Page Builder plugin before 2.10.16 for WordPress.siteorigin · page builder · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,8	28 May 2020
35İzleyin	CVE-2020-13642İstismar yok	An issue was discovered in the SiteOrigin Page Builder plugin before 2.10.16 for WordPress.siteorigin · page builder · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,8	28 May 2020
35İzleyin	CVE-2024-54268İstismar yok	WordPress SiteOrigin Widgets Bundle plugin <= 1.64.0 - Broken Access Control vulnerabilitysiteorigin · siteorigin widgets bundle · CWE-862 Erişim denetimi (IDOR)	Yüksek8,8	—	%0,6	13 Ara 2024
28İzleyin	CVE-2023-6295İstismar yok	so-widgets-bundle < 1.51.0 - Admin+ Local File Inclusionsiteorigin · siteorigin widgets bundle · CWE-22 Yol geçişi	Yüksek7,2	—	%1,0	18 Ara 2023
21İzleyin	CVE-2024-0961İstismar yok	SiteOrigin Widgets Bundle <= 1.58.1 - Authenticated (Contributor+) Stored Cross-Site Scriptingsiteorigin · siteorigin widgets bundle · CWE-79 XSS	Orta5,4	—	%0,5	5 Şub 2024
21İzleyin	CVE-2024-1070İstismar yok	SiteOrigin Widgets Bundle <= 1.58.2 - Authenticated (Contributor+) Stored Cross-Site Scriptingsiteorigin · siteorigin widgets bundle · CWE-79 XSS	Orta5,4	—	%0,5	28 Şub 2024
21İzleyin	CVE-2024-1723İstismar yok	SiteOrigin Widgets Bundle <= 1.58.7 - Authenticated (Contributor+) Stored Cross-Site Scriptingsiteorigin · siteorigin widgets bundle · CWE-79 XSS	Orta5,4	—	%0,5	13 Mar 2024
21İzleyin	CVE-2024-1058İstismar yok	SiteOrigin Widgets Bundle <= 1.58.3 - Authenticated (Contributor+) Stored Cross-Site Scriptingsiteorigin · siteorigin widgets bundle · CWE-79 XSS	Orta5,4	—	%0,4	28 Şub 2024
21İzleyin	CVE-2024-2202İstismar yok	Page Builder by SiteOrigin <= 2.29.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Legacy Image Widgetsiteorigin · page builder · CWE-79 XSS	Orta5,4	—	%0,4	22 Mar 2024
21İzleyin	CVE-2024-5901İstismar yok	SiteOrigin Widgets Bundle <= 1.62.2 - Authenticated (Contributor+) Stored Cross-Site Scripting in Image Grid widgetsiteorigin · siteorigin widgets bundle · CWE-79 XSS	Orta5,4	—	%0,4	30 Tem 2024
21İzleyin	CVE-2024-4362İstismar yok	SiteOrigin Widgets Bundle <= 1.60.0 - - Authenticated (Contributor+) Stored Cross-Site Scripting via 'siteorigin_widget' Shortcodesiteorigin · siteorigin widgets bundle · CWE-79 XSS	Orta5,4	—	%0,4	22 May 2024
21İzleyin	CVE-2024-4361İstismar yok	Page Builder by SiteOrigin <= 2.29.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'siteorigin_widget' Shortcodesiteorigin · page builder · CWE-79 XSS	Orta5,4	—	%0,4	21 May 2024
21İzleyin	CVE-2024-12240İstismar yok	Page Builder by SiteOrigin <= 2.31.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Row Label Parametersiteorigin · page builder · CWE-79 XSS	Orta5,4	—	%0,3	14 Oca 2025
21İzleyin	CVE-2024-5090İstismar yok	SiteOrigin Widgets Bundle <= 1.61.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via SiteOrigin Blog Widgetsiteorigin · siteorigin widgets bundle · CWE-79 XSS	Orta5,4	—	%0,3	10 Haz 2024
21İzleyin	CVE-2025-1459İstismar yok	Page Builder by SiteOrigin <= 2.31.4 - Authenticated (Contributor+) Stored Cross-Site Scriptingsiteorigin · page builder · CWE-79 XSS	Orta5,4	—	%0,2	1 Mar 2025
21İzleyin	CVE-2025-5585İstismar yok	SiteOrigin Widgets Bundle <= 1.68.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via `data-url` DOM Element Attributesiteorigin · siteorigin widgets bundle · CWE-79 XSS	Orta5,4	—	%0,2	24 Haz 2025

CVE-2020-13643
35İzleyin
An issue was discovered in the SiteOrigin Page Builder plugin before 2.10.16 for WordPress.
YüksekCVSS 8,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- CSRF
siteorigin · page builder28 May 2020
CVE-2020-13642
35İzleyin
An issue was discovered in the SiteOrigin Page Builder plugin before 2.10.16 for WordPress.
YüksekCVSS 8,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- CSRF
siteorigin · page builder28 May 2020
CVE-2024-54268
35İzleyin
WordPress SiteOrigin Widgets Bundle plugin <= 1.64.0 - Broken Access Control vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1
- Erişim denetimi (IDOR)
siteorigin · siteorigin widgets bundle13 Ara 2024
CVE-2023-6295
28İzleyin
so-widgets-bundle < 1.51.0 - Admin+ Local File Inclusion
YüksekCVSS 7,2İstismar yokEPSS %1
- Yol geçişi
siteorigin · siteorigin widgets bundle18 Ara 2023
CVE-2024-0961
21İzleyin
SiteOrigin Widgets Bundle <= 1.58.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
OrtaCVSS 5,4İstismar yokEPSS %1
- XSS
siteorigin · siteorigin widgets bundle5 Şub 2024
CVE-2024-1070
21İzleyin
SiteOrigin Widgets Bundle <= 1.58.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
OrtaCVSS 5,4İstismar yokEPSS %1
- XSS
siteorigin · siteorigin widgets bundle28 Şub 2024
CVE-2024-1723
21İzleyin
SiteOrigin Widgets Bundle <= 1.58.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
OrtaCVSS 5,4İstismar yokEPSS %1
- XSS
siteorigin · siteorigin widgets bundle13 Mar 2024
CVE-2024-1058
21İzleyin
SiteOrigin Widgets Bundle <= 1.58.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
siteorigin · siteorigin widgets bundle28 Şub 2024
CVE-2024-2202
21İzleyin
Page Builder by SiteOrigin <= 2.29.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Legacy Image Widget
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
siteorigin · page builder22 Mar 2024
CVE-2024-5901
21İzleyin
SiteOrigin Widgets Bundle <= 1.62.2 - Authenticated (Contributor+) Stored Cross-Site Scripting in Image Grid widget
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
siteorigin · siteorigin widgets bundle30 Tem 2024
CVE-2024-4362
21İzleyin
SiteOrigin Widgets Bundle <= 1.60.0 - - Authenticated (Contributor+) Stored Cross-Site Scripting via 'siteorigin_widget' Shortcode
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
siteorigin · siteorigin widgets bundle22 May 2024
CVE-2024-4361
21İzleyin
Page Builder by SiteOrigin <= 2.29.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'siteorigin_widget' Shortcode
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
siteorigin · page builder21 May 2024
CVE-2024-12240
21İzleyin
Page Builder by SiteOrigin <= 2.31.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Row Label Parameter
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
siteorigin · page builder14 Oca 2025
CVE-2024-5090
21İzleyin
SiteOrigin Widgets Bundle <= 1.61.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via SiteOrigin Blog Widget
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
siteorigin · siteorigin widgets bundle10 Haz 2024
CVE-2025-1459
21İzleyin
Page Builder by SiteOrigin <= 2.31.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
siteorigin · page builder1 Mar 2025
CVE-2025-5585
21İzleyin
SiteOrigin Widgets Bundle <= 1.68.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via `data-url` DOM Element Attribute
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
siteorigin · siteorigin widgets bundle24 Haz 2025