pagelayer vulnerabilities and fixes
Recent CVEs affecting pagelayer, with upgrade or downgrade steps. 8 tracked.
pagelayer has 8 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 8. Most recent: 2025-05-15. Highest priority: CVE-2024-30465 (score 32/100).
- CVE-2025-2104 MEDIUM 4.3 UPGRADE The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to unauthorized
- CVE-2025-1926 MEDIUM 4.3 UPGRADE The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Cross-Site R
- CVE-2024-8618 MEDIUM 4.8 UPGRADE The Page Builder: Pagelayer WordPress plugin before 1.9.0 does not sanitise and escape some of its settings,
- CVE-2024-8426 MEDIUM 4.8 UPGRADE The Page Builder: Pagelayer WordPress plugin before 1.8.8 does not sanitise and escape some of its settings,
- CVE-2024-43972 MEDIUM 5.9 UPGRADE Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in P
- CVE-2024-30465 MEDIUM 6.5 UPGRADE Missing Authorization vulnerability in Pagelayer Team PageLayer.This issue affects PageLayer: from n/a through
- CVE-2024-2504 MEDIUM 6.4 UPGRADE The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Stored Cross
- CVE-2024-13430 MEDIUM 4.3 UPGRADE The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Information
FAQ
How do I fix pagelayer vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is pagelayer being exploited right now?
None of the tracked pagelayer CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which pagelayer CVE should I patch first?
CVE-2024-30465 currently ranks highest (32/100): Missing Authorization vulnerability in Pagelayer Team PageLayer.This issue affects PageLayer: from n/a through.