Skip to content

Siteorigin vulnerabilities

Products

Newest

lenovo commercial vantage, vantage +1 more During an internal security assessment, an improper link following vulnerability was identified... CVE-2026-15994 7.3 HighAugust 13, 2026
lenovo vantage An improper link following vulnerability was reported in the VantageCoreAddin for Lenovo Vantage... CVE-2026-12036 6.9 MediumAugust 13, 2026
siteorigin vantage Vantage <= 1.20.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gallery Block Text Content CVE-2026-5070 6.4 MediumApril 16, 2026
lenovo diagnostics, hardware scan, vantage +2 more During an internal security assessment, a potential vulnerability was discovered in Lenovo... CVE-2026-0827 Public exploit 6.9 MediumApril 15, 2026
lenovo baiying, vantage +1 more An input validation vulnerability was reported in the LenovoProductivitySystemAddin used in... CVE-2026-1717 6.8 MediumMarch 11, 2026
lenovo baiying, vantage +1 more An input validation vulnerability was reported in the DeviceSettingsSystemAddin used in Lenovo... CVE-2026-1716 6.9 MediumMarch 11, 2026
lenovo baiying, vantage +1 more An input validation vulnerability was reported in the DeviceSettingsSystemAddin used in Lenovo... CVE-2026-1715 6.9 MediumMarch 11, 2026
lenovo vantage An improper link following vulnerability was reported in the SmartPerformanceAddin for Lenovo... CVE-2025-13154 6.8 MediumJanuary 14, 2026
lenovo vantage, commercial vantage +1 more An improper validation vulnerability was reported in Lenovo Vantage that under certain conditions... CVE-2025-6232 8.5 HighJuly 17, 2025
lenovo vantage, commercial vantage +1 more An improper validation vulnerability was reported in Lenovo Vantage that under certain conditions... CVE-2025-6231 8.5 HighJuly 17, 2025
lenovo vantage, commercial vantage +1 more A SQL injection vulnerability was reported in Lenovo Vantage that could allow a local attacker to... CVE-2025-6230 4.8 MediumJuly 17, 2025
gpriday siteorigin widgets bundle, siteorigin widgets bundle +1 more SiteOrigin Widgets Bundle <= 1.68.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via `data-url` DOM Element Attribute CVE-2025-5585 6.4 MediumJune 25, 2025
gpriday page builder by siteorigin, siteorigin page builder +1 more Page Builder by SiteOrigin <= 2.31.4 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-1459 6.4 MediumMarch 1, 2025
lenovo vantage An improper privilege vulnerability was reported in a BIOS customization feature of Lenovo... CVE-2024-12673 8.5 HighFebruary 12, 2025
gpriday page builder by siteorigin, siteorigin page builder +1 more Page Builder by SiteOrigin <= 2.31.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Row Label Parameter CVE-2024-12240 6.4 MediumJanuary 14, 2025
gpriday siteorigin widgets bundle, siteorigin widgets bundle +1 more WordPress SiteOrigin Widgets Bundle plugin <= 1.64.0 - Broken Access Control vulnerability CVE-2024-54268 4.3 MediumDecember 13, 2024
gpriday siteorigin widgets bundle, siteorigin widgets bundle +1 more SiteOrigin Widgets Bundle <= 1.62.2 - Authenticated (Contributor+) Stored Cross-Site Scripting in Image Grid widget CVE-2024-5901 6.4 MediumJuly 30, 2024
devnath verma widget bundle, siteorigin widgets bundle +1 more Widget Bundle <= 2.0.0 - Widget Disable/Enable via CSRF CVE-2024-4969 4.3 MediumJune 21, 2024
gpriday siteorigin widgets bundle, siteorigin widgets bundle +1 more SiteOrigin Widgets Bundle <= 1.61.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via SiteOrigin Blog Widget CVE-2024-5090 6.4 MediumJune 11, 2024
gpriday siteorigin widgets bundle, siteorigin widgets bundle +1 more SiteOrigin Widgets Bundle <= 1.60.0 - - Authenticated (Contributor+) Stored Cross-Site Scripting via 'siteorigin_widget' Shortcode CVE-2024-4362 6.4 MediumMay 22, 2024
gpriday page builder by siteorigin, siteorigin page builder +1 more Page Builder by SiteOrigin <= 2.29.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'siteorigin_widget' Shortcode CVE-2024-4361 6.4 MediumMay 21, 2024
gpriday page builder by siteorigin, siteorigin page builder +1 more Page Builder by SiteOrigin <= 2.29.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Legacy Image Widget CVE-2024-2202 6.4 MediumMarch 23, 2024
gpriday siteorigin widgets bundle, siteorigin widgets bundle +1 more SiteOrigin Widgets Bundle <= 1.58.7 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-1723 6.4 MediumMarch 13, 2024
gpriday siteorigin widgets bundle, siteorigin widgets bundle +1 more SiteOrigin Widgets Bundle <= 1.58.3 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-1058 6.4 MediumFebruary 20, 2024
gpriday siteorigin widgets bundle, siteorigin widgets bundle +1 more SiteOrigin Widgets Bundle <= 1.58.2 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-1070 6.4 MediumFebruary 20, 2024
gpriday siteorigin widgets bundle, siteorigin widgets bundle +1 more SiteOrigin Widgets Bundle <= 1.58.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-0961 6.4 MediumFebruary 5, 2024
lenovo vantage A privilege escalation vulnerability was reported in Lenovo Vantage that could allow a local... CVE-2023-6044 6.3 MediumJanuary 19, 2024
lenovo vantage A privilege escalation vulnerability was reported in Lenovo Vantage that could allow a local... CVE-2023-6043 7.8 HighJanuary 19, 2024
gpriday siteorigin widgets bundle, siteorigin widgets bundle +1 more so-widgets-bundle < 1.51.0 - Admin+ Local File Inclusion CVE-2023-6295 7.2 HighDecember 18, 2023
siteorigin page builder An issue was discovered in the SiteOrigin Page Builder plugin before 2.10.16 for WordPress. The... CVE-2020-13642 8.8 HighMay 28, 2020
siteorigin page builder An issue was discovered in the SiteOrigin Page Builder plugin before 2.10.16 for WordPress. The... CVE-2020-13643 8.8 HighMay 28, 2020
lenovo vantage A privilege escalation vulnerability was reported in LenovoBatteryGaugePackage for Lenovo System... CVE-2020-8327 7.3 HighApril 14, 2020
lenovo vantage A vulnerability was reported in Lenovo Vantage prior to version 10.2003.10.0 that could allow an... CVE-2020-8316 4.4 MediumApril 14, 2020