[ Vendor · 4 CVEs ]
gpriday
CVEs affecting gpriday published in the last 30 days, plus any gpriday CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-111122 | 16 Oct 2026 | CVSS 7.2 | gpriday SiteOrigin CSSThe SiteOrigin CSS plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'href' parameter in all versions up to, and… | |
| CVE-2026-107764 | 16 Oct 2026 | CVSS 7.2 | gpriday SiteOrigin CSSThe SiteOrigin CSS plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'url (comment_author_url)' parameter in all… | |
| CVE-2026-97348 | 10 Oct 2026 | CVSS 6.5 | gpriday SiteOrigin Widgets BundleThe SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.74.3 via the… | |
| CVE-2026-92174 | 2 Oct 2026 | CVSS 7.5 | gpriday SiteOrigin Widgets BundleThe SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.73.2 via the 'theme'… |