agentprime: softaculous-page-builder-pagelayer-drag-and-drop-website-builderEvery new CVE for softaculous-page-builder-pagelayer-drag-and-drop-website-builder.https://agentprime.io/CVE-2026-2470: Pagelayer <= 2.0.9 - Incorrect Authorization to Authenticated (Contributor+) Mail Relay Configuration via 'contacts'https://agentprime.io/advisories/CVE-2026-2470/https://agentprime.io/advisories/CVE-2026-2470/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 13 Jun 2026 07:51:22 GMTCVECVE-2026-3297: Page Builder: Pagelayer – Drag and Drop website builder <= 2.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Anchor Blockhttps://agentprime.io/advisories/CVE-2026-3297/https://agentprime.io/advisories/CVE-2026-3297/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 13 Jun 2026 07:51:21 GMTCVECVE-2026-2509: Page Builder: Pagelayer <= 2.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget Custom Attributeshttps://agentprime.io/advisories/CVE-2026-2509/https://agentprime.io/advisories/CVE-2026-2509/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Apr 2026 13:26:00 GMTCVECVE-2026-2442: Pagelayer <= 2.0.7 - Improper Neutralization of CRLF Sequences to Unauthenticated Email Header Injection via 'email'https://agentprime.io/advisories/CVE-2026-2442/https://agentprime.io/advisories/CVE-2026-2442/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 28 Mar 2026 09:27:10 GMTCVECVE-2025-12366: Page Builder: Pagelayer – Drag and Drop website builder <= 2.0.5 - Authenticated (Author+) Insecure Direct Object Referencehttps://agentprime.io/advisories/CVE-2025-12366/https://agentprime.io/advisories/CVE-2025-12366/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Nov 2025 03:27:37 GMTCVECVE-2025-4223: Page Builder: Pagelayer – Drag and Drop website builder <= 2.0.0 - Reflected Cross-Site Scripting via login_url Parameterhttps://agentprime.io/advisories/CVE-2025-4223/https://agentprime.io/advisories/CVE-2025-4223/CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 24 May 2025 04:25:18 GMTCVECVE-2024-13427: Page Builder: Pagelayer – Drag and Drop website builder <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Linkhttps://agentprime.io/advisories/CVE-2024-13427/https://agentprime.io/advisories/CVE-2024-13427/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 24 May 2025 01:41:10 GMTCVECVE-2025-2104: Page Builder: Pagelayer – Drag and Drop website builder <= 1.9.9 - Missing Authorization to Authenticated (Contributor+) Post Publicationhttps://agentprime.io/advisories/CVE-2025-2104/https://agentprime.io/advisories/CVE-2025-2104/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Mar 2025 04:21:04 GMTCVECVE-2024-13430: Page Builder: Pagelayer – Drag and Drop website builder <= 1.9.8 - Authenticated (Contributor+) Private Post Disclosure in pagelayer_builder_posts_shortcodehttps://agentprime.io/advisories/CVE-2024-13430/https://agentprime.io/advisories/CVE-2024-13430/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Mar 2025 08:21:37 GMTCVECVE-2025-1926: Page Builder: Pagelayer – Drag and Drop website builder <= 1.9.8 - Cross-Site Request Forgery (CSRF) To Post Contents Modificationhttps://agentprime.io/advisories/CVE-2025-1926/https://agentprime.io/advisories/CVE-2025-1926/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Mar 2025 04:21:10 GMTCVECVE-2024-2504: Page Builder: Pagelayer – Drag and Drop website builder <= 1.8.4 - Authenticated(Contributor+) Stored Cross-Site Scripting via custom attributeshttps://agentprime.io/advisories/CVE-2024-2504/https://agentprime.io/advisories/CVE-2024-2504/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Apr 2024 18:59:20 GMTCVECVE-2024-2127: Page Builder: Pagelayer – Drag and Drop website builder <= 1.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Attributeshttps://agentprime.io/advisories/CVE-2024-2127/https://agentprime.io/advisories/CVE-2024-2127/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 07 Mar 2024 19:33:04 GMTCVECVE-2024-1590: Page Builder: Pagelayer – Drag and Drop website builder <= 1.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Buttonhttps://agentprime.io/advisories/CVE-2024-1590/https://agentprime.io/advisories/CVE-2024-1590/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Feb 2024 09:32:37 GMTCVECVE-2023-6738: PageLayer <= 1.7.8 - Authenticated(Contributor+) Stored Cross-Site Scripting via meta fieldshttps://agentprime.io/advisories/CVE-2023-6738/https://agentprime.io/advisories/CVE-2023-6738/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 04 Jan 2024 03:30:13 GMTCVE