Pagelayer vulnerabilities

Products

• Pagelayer 19

Newest

• pagelayer, unknown page builder: pagelayer +1 more Page Builder: Pagelayer < 1.9.0- Admin+ Stored XSS CVE-2024-8618 4.8 MediumMay 15, 2025
• pagelayer, unknown page builder: pagelayer +1 more Pagelayer < 1.8.8 - Admin+ Stored XSS CVE-2024-8426 4.8 MediumMay 15, 2025
• pagelayer, softaculous page builder: pagelayer – drag and drop website builder +1 more Page Builder: Pagelayer – Drag and Drop website builder <= 1.9.9 - Missing Authorization to Authenticated (Contributor+) Post Publication CVE-2025-2104 4.3 MediumMarch 13, 2025
• pagelayer, softaculous page builder: pagelayer – drag and drop website builder +1 more Page Builder: Pagelayer – Drag and Drop website builder <= 1.9.8 - Authenticated (Contributor+) Private Post Disclosure in pagelayer_builder_posts_shortcode CVE-2024-13430 4.3 MediumMarch 12, 2025
• pagelayer, softaculous page builder: pagelayer – drag and drop website builder +1 more Page Builder: Pagelayer – Drag and Drop website builder <= 1.9.8 - Cross-Site Request Forgery (CSRF) To Post Contents Modification CVE-2025-1926 4.3 MediumMarch 10, 2025
• pagelayer WordPress Page Builder: Pagelayer – Drag and Drop website builder plugin <= 1.8.7 - Cross Site Scripting (XSS) vulnerability CVE-2024-43972 5.9 MediumSeptember 17, 2024
• pagelayer WordPress PageLayer plugin <= 1.8.1 - Broken Access Control vulnerability CVE-2024-30465 6.5 MediumJune 9, 2024
• pagelayer popularfx WordPress PopularFX theme <= 1.2.4 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-31383 4.3 MediumApril 15, 2024
• pagelayer, softaculous page builder: pagelayer – drag and drop website builder +1 more Page Builder: Pagelayer – Drag and Drop website builder <= 1.8.4 - Authenticated(Contributor+) Stored Cross-Site Scripting via custom attributes CVE-2024-2504 6.4 MediumApril 9, 2024
• pagelayer, softaculous page builder: pagelayer – drag and drop website builder +1 more Page Builder: Pagelayer – Drag and Drop website builder <= 1.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Attributes CVE-2024-2127 6.4 MediumMarch 7, 2024
• pagelayer, unknown page builder: pagelayer +1 more PageLayer < 1.8.1 - Admin+ Stored XSS CVE-2023-7115 4.8 MediumFebruary 27, 2024
• pagelayer, softaculous page builder: pagelayer – drag and drop website builder +1 more Page Builder: Pagelayer – Drag and Drop website builder <= 1.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button CVE-2024-1590 4.6 MediumFebruary 23, 2024
• pagelayer, unknown page builder: pagelayer +1 more PageLayer < 1.8.0 - Author+ Stored XSS CVE-2023-5124 4.8 MediumJanuary 29, 2024
• pagelayer, softaculous page builder: pagelayer – drag and drop website builder +1 more PageLayer <= 1.7.8 - Authenticated(Contributor+) Stored Cross-Site Scripting via meta fields CVE-2023-6738 5.4 MediumJanuary 4, 2024
• pagelayer, unknown page builder: pagelayer +1 more PageLayer < 1.7.7 - Unauthenticated Stored XSS CVE-2023-4687 6.1 MediumOctober 16, 2023
• pagelayer, unknown page builder: pagelayer +1 more PageLayer < 1.7.8 - Author+ Stored XSS CVE-2023-5087 5.4 MediumOctober 16, 2023
• pagelayer PageLayer before 1.3.5 allows reflected XSS via the font-size parameter. CVE-2020-36383 6.1 MediumJune 7, 2021
• pagelayer PageLayer before 1.3.5 allows reflected XSS via color settings. CVE-2020-36384 6.1 MediumJune 7, 2021
• pagelayer An issue was discovered in the PageLayer plugin before 1.1.2 for WordPress. The... CVE-2020-35944 8.8 HighJanuary 1, 2021
• pagelayer An issue was discovered in the PageLayer plugin before 1.1.2 for WordPress. Nearly all of the... CVE-2020-35947 7.4 HighJanuary 1, 2021