PA
Product
Pagelayer
19
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 16Low 0
Watch
Add Pagelayer to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-30465 | 8.8 | Jun 9 | WordPress PageLayer plugin <= 1.8.1 - Broken Access Control vulnerability Affected: before 1.8.2 |
| CVE-2020-35944 | 8.8 | Jan 1 | An issue was discovered in the PageLayer plugin before 1.1.2 for WordPress Affected: before 1.1.2 |
| CVE-2020-35947 | 7.4 | Jan 1 | An issue was discovered in the PageLayer plugin before 1.1.2 for WordPress Affected: before 1.1.2 |
| CVE-2023-4687 | 6.1 | Oct 16 | PageLayer < 1.7.7 - Unauthenticated Stored XSS Affected: before 1.7.7 |
| CVE-2020-36383 | 6.1 | Jun 7 | PageLayer before 1.3.5 allows reflected XSS via the font-size parameter Affected: before 1.3.5 |
| CVE-2020-36384 | 6.1 | Jun 7 | PageLayer before 1.3.5 allows reflected XSS via color settings Affected: before 1.3.5 |
| CVE-2024-2504 | 5.4 | Apr 9 | Page Builder: Pagelayer – Drag and Drop website builder <= 1.8.4 - Authenticated(Contributor+) Stored Cross-Site Scripting via custom attributes Affected: before 1.8.5 |
| CVE-2024-2127 | 5.4 | Mar 7 | Page Builder: Pagelayer – Drag and Drop website builder <= 1.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Attributes Affected: before 1.8.4 |
| CVE-2024-1590 | 5.4 | Feb 23 | Page Builder: Pagelayer – Drag and Drop website builder <= 1.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Affected: before 1.8.3 |
| CVE-2023-6738 | 5.4 | Jan 4 | PageLayer <= 1.7.8 - Authenticated(Contributor+) Stored Cross-Site Scripting via meta fields Affected: through 1.7.8 |
| CVE-2023-5087 | 5.4 | Oct 16 | PageLayer < 1.7.8 - Author+ Stored XSS Affected: before 1.7.8 |
| CVE-2024-8618 | 4.8 | May 15 | Page Builder: Pagelayer < 1.9.0- Admin+ Stored XSS Affected: before 1.9.0 |
| CVE-2024-8426 | 4.8 | May 15 | Pagelayer < 1.8.8 - Admin+ Stored XSS Affected: before 1.8.8 |
| CVE-2024-43972 | 4.8 | Sep 17 | WordPress Page Builder: Pagelayer – Drag and Drop website builder plugin <= 1.8.7 - Cross Site Scripting (XSS) vulnerability Affected: before 1.8.8 |
| CVE-2023-7115 | 4.8 | Feb 27 | PageLayer < 1.8.1 - Admin+ Stored XSS Affected: before 1.8.1 |
| CVE-2023-5124 | 4.8 | Jan 29 | PageLayer < 1.8.0 - Author+ Stored XSS Affected: before 1.8.0 |
| CVE-2025-2104 | 4.3 | Mar 13 | Page Builder: Pagelayer – Drag and Drop website builder <= 1.9.9 - Missing Authorization to Authenticated (Contributor+) Post Publication Affected: before 2.0.0 |
| CVE-2024-13430 | 4.3 | Mar 12 | Page Builder: Pagelayer – Drag and Drop website builder <= 1.9.8 - Authenticated (Contributor+) Private Post Disclosure in pagelayer_builder_posts_shortcode Affected: before 1.9.9 |
| CVE-2025-1926 | 4.3 | Mar 10 | Page Builder: Pagelayer – Drag and Drop website builder <= 1.9.8 - Cross-Site Request Forgery (CSRF) To Post Contents Modification Affected: before 1.9.9 |
Showing 19