Gpriday vulnerabilities

Products

• Siteorigin Widgets Bundle 13
• Page Builder By Siteorigin 9
• Siteorigin Css 2

Newest

• gpriday page builder by siteorigin Page Builder by SiteOrigin < 2.38.0 - Contributor+ Sensitive Data Disclosure via Post Loop Widget Query Arguments CVE-2026-110507 2.7 LowOctober 28, 2026
• gpriday page builder by siteorigin Page Builder by SiteOrigin < 2.38.0 - Contributor+ Stored XSS via panels_info.class CVE-2026-110506 6.8 MediumOctober 28, 2026
• gpriday siteorigin css SiteOrigin CSS <= 1.6.7 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Author URL via Inspector href Sink CVE-2026-107764 7.2 HighOctober 16, 2026
• gpriday siteorigin css SiteOrigin CSS <= 1.6.7 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Anchor href via Visual Inspector CVE-2026-111122 7.2 HighOctober 16, 2026
• gpriday siteorigin widgets bundle SiteOrigin Widgets Bundle <= 1.74.3 - Authenticated (Contributor+) Arbitrary File Read via LESS Injection via [siteorigin_widget] Shortcode 'value' JSON Instance (design.colors LESS Variable) CVE-2026-97348 6.5 MediumOctober 10, 2026
• gpriday siteorigin widgets bundle SiteOrigin Widgets Bundle <= 1.73.2 - Authenticated (Contributor+) Local File Inclusion via 'theme' Parameter CVE-2026-92174 7.5 HighOctober 2, 2026
• gpriday page builder by siteorigin WordPress Page Builder by SiteOrigin plugin <= 2.36.0 - PHP Object Injection vulnerability CVE-2026-97256 7.2 HighSeptember 30, 2026
• gpriday page builder by siteorigin Page Builder by SiteOrigin <= 2.34.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via panels_data Parameter CVE-2026-13295 6.4 MediumJune 27, 2026
• gpriday page builder by siteorigin Page Builder by SiteOrigin <= 2.33.5 - Authenticated (Contributor+) Local File Inclusion CVE-2026-2448 8.8 HighMarch 3, 2026
• gpriday siteorigin widgets bundle SiteOrigin Widgets Bundle <= 1.70.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Shortcode Execution CVE-2026-2127 5.4 MediumFebruary 18, 2026
• gpriday siteorigin widgets bundle, siteorigin widgets bundle +1 more SiteOrigin Widgets Bundle <= 1.68.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via `data-url` DOM Element Attribute CVE-2025-5585 6.4 MediumJune 25, 2025
• gpriday page builder by siteorigin, siteorigin page builder +1 more Page Builder by SiteOrigin <= 2.31.4 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-1459 6.4 MediumMarch 1, 2025
• gpriday page builder by siteorigin, siteorigin page builder +1 more Page Builder by SiteOrigin <= 2.31.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Row Label Parameter CVE-2024-12240 6.4 MediumJanuary 14, 2025
• gpriday siteorigin widgets bundle, siteorigin widgets bundle +1 more WordPress SiteOrigin Widgets Bundle plugin <= 1.64.0 - Broken Access Control vulnerability CVE-2024-54268 4.3 MediumDecember 13, 2024
• gpriday siteorigin widgets bundle, siteorigin widgets bundle +1 more SiteOrigin Widgets Bundle <= 1.62.2 - Authenticated (Contributor+) Stored Cross-Site Scripting in Image Grid widget CVE-2024-5901 6.4 MediumJuly 30, 2024
• gpriday siteorigin widgets bundle, siteorigin widgets bundle +1 more SiteOrigin Widgets Bundle <= 1.61.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via SiteOrigin Blog Widget CVE-2024-5090 6.4 MediumJune 11, 2024
• gpriday siteorigin widgets bundle, siteorigin widgets bundle +1 more SiteOrigin Widgets Bundle <= 1.60.0 - - Authenticated (Contributor+) Stored Cross-Site Scripting via 'siteorigin_widget' Shortcode CVE-2024-4362 6.4 MediumMay 22, 2024
• gpriday page builder by siteorigin, siteorigin page builder +1 more Page Builder by SiteOrigin <= 2.29.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'siteorigin_widget' Shortcode CVE-2024-4361 6.4 MediumMay 21, 2024
• gpriday page builder by siteorigin, siteorigin page builder +1 more Page Builder by SiteOrigin <= 2.29.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Legacy Image Widget CVE-2024-2202 6.4 MediumMarch 23, 2024
• gpriday siteorigin widgets bundle, siteorigin widgets bundle +1 more SiteOrigin Widgets Bundle <= 1.58.7 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-1723 6.4 MediumMarch 13, 2024
• gpriday siteorigin widgets bundle, siteorigin widgets bundle +1 more SiteOrigin Widgets Bundle <= 1.58.3 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-1058 6.4 MediumFebruary 20, 2024
• gpriday siteorigin widgets bundle, siteorigin widgets bundle +1 more SiteOrigin Widgets Bundle <= 1.58.2 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-1070 6.4 MediumFebruary 20, 2024
• gpriday siteorigin widgets bundle, siteorigin widgets bundle +1 more SiteOrigin Widgets Bundle <= 1.58.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-0961 6.4 MediumFebruary 5, 2024
• gpriday siteorigin widgets bundle, siteorigin widgets bundle +1 more so-widgets-bundle < 1.51.0 - Admin+ Local File Inclusion CVE-2023-6295 7.2 HighDecember 18, 2023