Page Builder by SiteOrigin

WordPress plugin · siteorigin-panels · WordPress.org ↗

Latest v2.36.0 Last release Aug 4, 2026 Tested up to WP 7.0.5 400,000+ active installs

Critical

High

Known total

Unfixed

Running Page Builder by SiteOrigin on your site? WP Alerts checks your installed version against every entry below and emails you only when one affects you. Free, no tracking.

Scan a site Monitor my sites →

Severity	Vulnerability	Affected	Fixed in	CVE	Published
HIGH CVSS 8.8	Page Builder by SiteOrigin [siteorigin-panels] < 2.10.16 WPVulnerability	< 2.10.16	v2.10.16	CVE-2020-13643	May 11, 2020
HIGH CVSS 8.8	Page Builder by SiteOrigin [siteorigin-panels] < 2.10.16 WPVulnerability	< 2.10.16	v2.10.16	CVE-2020-13642	May 5, 2020
MEDIUM CVSS 6.4	Page Builder by SiteOrigin [siteorigin-panels] < 2.34.4 WPVulnerability	< 2.34.4	v2.34.4	CVE-2026-13295	Jun 26, 2026
MEDIUM CVSS 5.4	Page Builder by SiteOrigin [siteorigin-panels] < 2.31.5 WPVulnerability	< 2.31.5	v2.31.5	CVE-2025-1459	Feb 28, 2025
MEDIUM CVSS 6.4	Page Builder by SiteOrigin [siteorigin-panels] < 2.31.1 WPVulnerability	< 2.31.1	v2.31.1	CVE-2024-12240	Jan 13, 2025
MEDIUM CVSS 5.4	Page Builder by SiteOrigin [siteorigin-panels] < 2.29.16 WPVulnerability	< 2.29.16	v2.29.16	CVE-2024-4361	May 20, 2024
MEDIUM CVSS 5.4	Page Builder by SiteOrigin [siteorigin-panels] < 2.29.7 WPVulnerability	< 2.29.7	v2.29.7	CVE-2024-2202	Mar 22, 2024
UNKNOWN	Page Builder by SiteOrigin [siteorigin-panels] < 2.34.0 WPVulnerability	< 2.34.0	v2.34.0	CVE-2026-2448	Mar 2, 2026
UNKNOWN	Page Builder by SiteOrigin [siteorigin-panels] < 2.0.5 WPVulnerability	< 2.0.5	v2.0.5	—	Jan 12, 2023
UNKNOWN	Page Builder by SiteOrigin [siteorigin-panels] < 2.0.5 WPVulnerability	< 2.0.5	v2.0.5	—	Dec 1, 2015
UNKNOWN	Page Builder by SiteOrigin [siteorigin-panels] < 2.0.5 WPVulnerability	< 2.0.5	v2.0.5	—	Jan 12, 2015
UNKNOWN	Page Builder by SiteOrigin [siteorigin-panels] < 2.0.5 WPVulnerability	< 2.0.5	v2.0.5	—	—

Data aggregated from WPVulnerability, NVD/NIST, ENISA EUVD, CVE.org and WordPress.org. Provided as-is; verify with the plugin author before acting. Disclaimer.