Softaculous Page Builder: Pagelayer – Drag and Drop website builder

• CVE-2026-2470 Medium 4.3 Pagelayer <= 2.0.9 - Incorrect Authorization to Authenticated (Contributor+) Mail Relay Configuration via 'contacts' 0.3%
• CVE-2026-3297 Medium 6.4 Page Builder: Pagelayer – Drag and Drop website builder <= 2.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Anchor Block 0.2%
• CVE-2026-2509 Medium 6.4 Page Builder: Pagelayer <= 2.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget Custom Attributes 0.4%
• CVE-2026-2442 Medium 5.3 Pagelayer <= 2.0.7 - Improper Neutralization of CRLF Sequences to Unauthenticated Email Header Injection via 'email' 0.3%
• CVE-2025-12366 Medium 4.3 Page Builder: Pagelayer – Drag and Drop website builder <= 2.0.5 - Authenticated (Author+) Insecure Direct Object Reference 0.3%
• CVE-2025-4223 Medium 4.7 Page Builder: Pagelayer – Drag and Drop website builder <= 2.0.0 - Reflected Cross-Site Scripting via login_url Parameter 0.4%
• CVE-2024-13427 Medium 6.4 Page Builder: Pagelayer – Drag and Drop website builder <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Link 0.3%
• CVE-2025-2104 Medium 4.3 Page Builder: Pagelayer – Drag and Drop website builder <= 1.9.9 - Missing Authorization to Authenticated (Contributor+) Post Publication 0.3%
• CVE-2024-13430 Medium 4.3 Page Builder: Pagelayer – Drag and Drop website builder <= 1.9.8 - Authenticated (Contributor+) Private Post Disclosure in pagelayer_builder_posts_shortcode 0.3%
• CVE-2025-1926 Medium 4.3 Page Builder: Pagelayer – Drag and Drop website builder <= 1.9.8 - Cross-Site Request Forgery (CSRF) To Post Contents Modification 0.2%
• CVE-2024-2504 Medium 6.4 Page Builder: Pagelayer – Drag and Drop website builder <= 1.8.4 - Authenticated(Contributor+) Stored Cross-Site Scripting via custom attributes 0.4%
• CVE-2024-2127 Medium 6.4 Page Builder: Pagelayer – Drag and Drop website builder <= 1.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Attributes 0.3%
• CVE-2024-1590 Medium 4.6 Page Builder: Pagelayer – Drag and Drop website builder <= 1.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button 0.4%
• CVE-2023-6738 Medium 5.4 PageLayer <= 1.7.8 - Authenticated(Contributor+) Stored Cross-Site Scripting via meta fields 0.4%