Product by Softaculous
Page Builder: Pagelayer – Drag And Drop Website Builder
14 known vulnerabilities in Page Builder: Pagelayer – Drag And Drop Website Builder (Softaculous), 0 of them actively exploited (CISA KEV).
Key figures
14
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Medium | CVE-2026-2509 | Softaculous Page Builder: Cross-site Scripting | 6.4 | |
| Medium | CVE-2026-3297 | Softaculous Page Builder: Cross-site Scripting | 6.4 | |
| Medium | CVE-2024-2504 | Softaculous Page Builder: Cross-site Scripting | 6.4 | |
| Medium | CVE-2026-2442 | Softaculous Page Builder: CRLF Injection | 5.3 | |
| Medium | CVE-2024-13427 | Softaculous Page Builder: Cross-site Scripting | 6.4 | |
| Medium | CVE-2026-2470 | Softaculous Page Builder: Incorrect Authorization | 4.3 | |
| Medium | CVE-2024-2127 | Softaculous Page Builder: Cross-site Scripting | 6.4 | |
| Medium | CVE-2023-6738 | PageLayer <= 1.7.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via meta fields | 5.4 | |
| Medium | CVE-2025-4223 | Softaculous Page Builder: Cross-site Scripting | 4.7 | |
| Medium | CVE-2025-12366 | Softaculous Page Builder: Authorization Bypass Through User-Controlled Key | 4.3 | |
| Medium | CVE-2024-13430 | Softaculous Page Builder: Improper Access Control | 4.3 | |
| Medium | CVE-2024-1590 | Softaculous Page Builder: Cross-site Scripting | 4.6 | |
| Medium | CVE-2025-2104 | Softaculous Page Builder: Missing Authorization | 4.3 | |
| Medium | CVE-2025-1926 | Softaculous Page Builder: Cross-Site Request Forgery (CSRF) | 4.3 |