Skip to content
OpenAdvisories

Product · gpriday

Page Builder by SiteOrigin

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-2448

    Page Builder by SiteOrigin <= 2.33.5 - Authenticated (Contributor+) Local File Inclusion

    The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.33.5 via the locate_template() function. This makes it possible for authenticated attackers, with Contributor-level access and ab…

    gpriday Page Builder by SiteOrigin Web / CMS