Browse CVEs

HIGH 8.8 CVE-2024-30465 Missing Authorization vulnerability in Pagelayer Team PageLayer.This issue affects PageLayer: from n/a through 1.8.1. Pagelayer 1.8.2+ Fix from $1,9502024-06-09 MEDIUM 5.4 CVE-2024-2504 The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'attr' paramete… Pagelayer 1.8.5+ Fix from $1,6002024-04-09 MEDIUM 5.4 CVE-2024-2127 The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom attributes i… Pagelayer 1.8.4+ Fix from $1,6002024-03-07 MEDIUM 5.4 CVE-2024-1590 The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Button… Pagelayer 1.8.3+ Fix from $1,6002024-02-23 MEDIUM 5.4 CVE-2023-6738 The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pagelayer_head… Pagelayer after 1.7.8 Fix from $1,6002024-01-04 MEDIUM 5.4 CVE-2023-5087 The Page Builder: Pagelayer WordPress plugin before 1.7.8 doesn't prevent attackers with author privileges and higher from inserting malicious JavaSc… Pagelayer 1.7.8+ Fix from $1,6002023-10-16 MEDIUM 6.1 CVE-2023-4687 The Page Builder: Pagelayer WordPress plugin before 1.7.7 doesn't prevent unauthenticated attackers from updating a post's header or footer code on s… Pagelayer 1.7.7+ Fix from $1,6002023-10-16 MEDIUM 6.1 CVE-2020-36384 PageLayer before 1.3.5 allows reflected XSS via color settings. Pagelayer 1.3.5+ Fix from $1,6002021-06-07 MEDIUM 6.1 CVE-2020-36383 PageLayer before 1.3.5 allows reflected XSS via the font-size parameter. Pagelayer 1.3.5+ Fix from $1,6002021-06-07 HIGH 8.8 CVE-2020-35944 An issue was discovered in the PageLayer plugin before 1.1.2 for WordPress. The pagelayer_settings_page function is vulnerable to CSRF, which can lea… Pagelayer 1.1.2+ Fix from $1,9502021-01-01 HIGH 7.4 CVE-2020-35947 An issue was discovered in the PageLayer plugin before 1.1.2 for WordPress. Nearly all of the AJAX action endpoints lacked permission checks, allowin… Pagelayer 1.1.2+ Fix from $1,9502021-01-01