Skip to content
OpenAdvisories

Vendor

pootlepress

5 known vulnerabilities.

Products

Pootle Pagebuilder – WordPress Page builder 2 Pootle button 1 Mobile Pages 1 Caxton – Create Pro page layouts in Gutenberg 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.3
    CVE-2022-4974

    Freemius SDK <= 2.4.2 - Missing Authorization Checks

    The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_debug_log, _get_db_option, and the _set_d…

    bPlugins Saad Iqbal Premmerce nicheaddons Web / CMS
  • Medium 6.5
    CVE-2024-37948

    WordPress Caxton – Create Pro page layouts in Gutenberg plugin <= 1.30.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in PootlePress Caxton – Create Pro page layouts in Gutenberg allows Stored XSS.This issue affects Caxton – Create Pro page layouts in Gutenberg: from n/a…

    pootlepress Caxton – Create Pro page layouts in Gutenberg
  • Medium 6.5
    CVE-2024-34573

    WordPress Pootle Pagebuilder plugin <= 5.7.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pootlepress Pootle Pagebuilder – WordPress Page builder allows Stored XSS.This issue affects Pootle Pagebuilder – WordPress Page builder: from n/a through 5.…

    pootlepress Pootle Pagebuilder – WordPress Page builder Web / CMS