Login Request a demo
GP
Vendor
gpriday
3 products with CVEs on record
19
CVEs
0
On KEV
4
New 30D
Products
SW
SiteOrigin Widgets Bundle
gpriday
7.5
11 CVEs0 on KEV2 new
SC
SiteOrigin CSS
gpriday
7.2
2 CVEs0 on KEV2 new
PB
Page Builder by SiteOrigin
gpriday
8.8
6 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-107764
SC
SiteOrigin CSS
gpriday
7.2
0%
Oct 16SiteOrigin CSS <= 1.6.7 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Author URL via Inspector href Sink
CVE-2026-111122
SC
SiteOrigin CSS
gpriday
7.2
0%
Oct 16SiteOrigin CSS <= 1.6.7 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Anchor href via Visual Inspector
CVE-2026-97348
SW
SiteOrigin Widgets Bundle
gpriday
6.5
1%
Oct 10SiteOrigin Widgets Bundle <= 1.74.3 - Authenticated (Contributor+) Arbitrary File Read via LESS Injection via [siteorigin_widget] Shortcode 'value' JSON Instance (design.colors LESS Variable)
CVE-2026-92174
SW
SiteOrigin Widgets Bundle
gpriday
7.5
1%
Oct 2SiteOrigin Widgets Bundle <= 1.73.2 - Authenticated (Contributor+) Local File Inclusion via 'theme' Parameter
CVE-2026-13295
PB
Page Builder by SiteOrigin
gpriday
6.4
0%
Jun 27Page Builder by SiteOrigin <= 2.34.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via panels_data Parameter
CVE-2026-2448
PB
Page Builder by SiteOrigin
gpriday
8.8
1%
Mar 3Page Builder by SiteOrigin <= 2.33.5 - Authenticated (Contributor+) Local File Inclusion
CVE-2026-2127
SW
SiteOrigin Widgets Bundle
gpriday
5.4
0%
Feb 18SiteOrigin Widgets Bundle <= 1.70.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Shortcode Execution
CVE-2025-5585
SW
SiteOrigin Widgets Bundle
gpriday
5.4
0%
Jun 25SiteOrigin Widgets Bundle <= 1.68.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via `data-url` DOM Element Attribute
CVE-2025-1459
PB
Page Builder by SiteOrigin
gpriday
5.4
0%
Mar 1Page Builder by SiteOrigin <= 2.31.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-12240
PB
Page Builder by SiteOrigin
gpriday
5.4
0%
Jan 14Page Builder by SiteOrigin <= 2.31.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Row Label Parameter
CVE-2024-5901
SW
SiteOrigin Widgets Bundle
gpriday
5.4
0%
Jul 30SiteOrigin Widgets Bundle <= 1.62.2 - Authenticated (Contributor+) Stored Cross-Site Scripting in Image Grid widget
CVE-2024-5090
SW
SiteOrigin Widgets Bundle
gpriday
5.4
0%
Jun 11SiteOrigin Widgets Bundle <= 1.61.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via SiteOrigin Blog Widget
CVE-2024-4362
SW
SiteOrigin Widgets Bundle
gpriday
5.4
0%
May 22SiteOrigin Widgets Bundle <= 1.60.0 - - Authenticated (Contributor+) Stored Cross-Site Scripting via 'siteorigin_widget' Shortcode
CVE-2024-4361
PB
Page Builder by SiteOrigin
gpriday
5.4
0%
May 21Page Builder by SiteOrigin <= 2.29.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'siteorigin_widget' Shortcode
CVE-2024-2202
PB
Page Builder by SiteOrigin
gpriday
5.4
0%
Mar 23Page Builder by SiteOrigin <= 2.29.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Legacy Image Widget
CVE-2024-1723
SW
SiteOrigin Widgets Bundle
gpriday
5.4
1%
Mar 13SiteOrigin Widgets Bundle <= 1.58.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-1058
SW
SiteOrigin Widgets Bundle
gpriday
5.4
0%
Feb 20SiteOrigin Widgets Bundle <= 1.58.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-1070
SW
SiteOrigin Widgets Bundle
gpriday
5.4
1%
Feb 20SiteOrigin Widgets Bundle <= 1.58.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-0961
SW
SiteOrigin Widgets Bundle
gpriday
5.4
1%
Feb 5SiteOrigin Widgets Bundle <= 1.58.1 - Authenticated (Contributor+) Stored Cross-Site Scripting