Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-06-17
Page Builder Sandwich - Cross-Site Scripting (XSS) (CVE-2024-37219)
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in PBN Hosting SL Page Builder Sandwich – Front-End Page Builder allows Stored XSS.This issue affects Page Builder Sandwich – Front-End Page Builder: from n/a through 5.1.0.
PLUGIN
Page Builder Sandwich
CVE-2024-37219
Risk Score
Threat Entry
Updated 2026-06-17
Page Builder Sandwich - Information Disclosure (CVE-2024-1381)
The Page Builder Sandwich – Front End WordPress Page Builder Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.1.0. This makes it possible for authenticated attackers, with subscriber access and higher, to extract sensitive user or configuration data.
PLUGIN
Page Builder Sandwich
CVE-2024-1381
Risk Score
Threat Entry
Updated 2026-06-17
Page Builder Sandwich - Broken Access Control (CVE-2024-1285)
The Page Builder Sandwich – Front End WordPress Page Builder Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'gambit_builder_save_content' function in all versions up to, and including, 5.1.0. This makes it possible for authenticated attackers, with subscriber access and above, to insert arbitrary content into existing posts.
PLUGIN
Page Builder Sandwich
CVE-2024-1285
Risk Score