Vulnerability Bulletins

Vulnerabilities Patched in Page Builder by SiteOrigin Affects Over 1 Million Sites


System information

   
Affected software Wordpress

Description

On Monday, May 4, 2020, the Wordfence Threat Intelligence team discovered two vulnerabilities present in Page Builder by SiteOrigin, a WordPress plugin actively installed on over 1,000,000 sites. Both of these flaws allow attackers to forge requests on behalf of a site administrator and execute malicious code in the administrator’s browser. The attacker needs to […]

More info:

https://www.wordfence.com/blog/2020/05/vulnerabilities-patched-in-page-builder-by-siteorigin-affects-over-1-million-sites/

Standar resources

Property Value
CVE

Version history

Version Comments Date
1.0 Advisory issued 2020-05-14
Ministerio de Defensa
CNI
CCN
CCN-CERT