Security
فارسی
All products

pagelayer

WordPress · Plugin
30 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Pagelayer <= 2.0.9 - Incorrect Authorization to Authenticated (Contributor+) Mail Relay Configuration via 'contacts'CVE-2026-2470 pagelayer WordPress Medium Fix reported
Page Builder: Pagelayer – Drag and Drop website builder <= 2.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Anchor BlockCVE-2026-3297 pagelayer WordPress Medium Fix reported
PageLayer <= 2.0.8 - Authenticated (Contributor+) Information ExposureCVE-2026-39469 pagelayer WordPress Medium Fix reported
Page Builder: Pagelayer <= 2.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget Custom AttributesCVE-2026-2509 pagelayer WordPress Medium Fix reported
Pagelayer <= 2.0.7 - Improper Neutralization of CRLF Sequences to Unauthenticated Email Header Injection via 'email'CVE-2026-2442 pagelayer WordPress Medium Fix reported
Page Builder: Pagelayer – Drag and Drop website builder <= 2.0.5 - Authenticated (Author+) Insecure Direct Object ReferenceCVE-2025-12366 pagelayer WordPress Medium Fix reported
Page Builder: Pagelayer <= 1.8.9 - Authenticated (Admin+) Stored Cross-Site ScriptingCVE-2024-8618 pagelayer WordPress Medium Fix reported
Page Builder: Pagelayer <= 1.8.7 - Authenticated (Admin+) Stored Cross-Site ScriptingCVE-2024-8426 pagelayer WordPress Medium Fix reported
Page Builder: Pagelayer – Drag and Drop website builder <= 2.0.0 - Reflected Cross-Site Scripting via login_url ParameterCVE-2025-4223 pagelayer WordPress Medium Fix reported
Page Builder: Pagelayer – Drag and Drop website builder <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button LinkCVE-2024-13427 pagelayer WordPress Medium Fix reported
Page Builder: Pagelayer – Drag and Drop website builder <= 1.9.9 - Missing Authorization to Authenticated (Contributor+) Post PublicationCVE-2025-2104 pagelayer WordPress Medium Fix reported
Page Builder: Pagelayer – Drag and Drop website builder <= 1.9.8 - Authenticated (Contributor+) Private Post Disclosure in pagelayer_builder_posts_shortcodeCVE-2024-13430 pagelayer WordPress Medium Fix reported
Page Builder: Pagelayer – Drag and Drop website builder <= 1.9.8 - Cross-Site Request Forgery (CSRF) To Post Contents ModificationCVE-2025-1926 pagelayer WordPress Medium Fix reported
PageLayer <= 1.9.4 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2025-24573 pagelayer WordPress Medium Fix reported
PageLayer <= 1.7.7 - Cross-Site Request Forgery via pagelayer_load_pluginCVE-2023-49196 pagelayer WordPress Medium Fix reported
PageLayer <= 1.8.7 - Authenticated (Administrator+) Stored Cross-Site ScriptingCVE-2024-43972 pagelayer WordPress Medium Fix reported
PageLayer <= 1.7.8 - Authenticated(Contributor+) Stored Cross-Site Scripting via meta fieldsCVE-2023-6738 pagelayer WordPress Medium Fix reported
Page Builder: Pagelayer – Drag and Drop website builder <= 1.8.4 - Authenticated(Contributor+) Stored Cross-Site Scripting via custom attributesCVE-2024-2504 pagelayer WordPress Medium Fix reported
PageLayer <= 1.8.1 - Missing AuthorizationCVE-2024-30465 pagelayer WordPress Medium Fix reported
Page Builder: Pagelayer <= 1.7.9 - Authenticated (Admin+) Stored Cross-Site ScriptingCVE-2023-7115 pagelayer WordPress Medium Fix reported