Known vulnerabilities in the Drag And Drop Website Builder plugin
16 security advisories have been published for the Drag And Drop Website Builder plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Drag And Drop Website Builder - Cross-Site Scripting (XSS) (CVE-2026-17090) MEDIUM
- Drag And Drop Website Builder - Cross-Site Scripting (XSS) (CVE-2026-3297) MEDIUM
- Drag And Drop Website Builder - Broken Access Control (CVE-2026-2470) MEDIUM
- Drag And Drop Website Builder - Cross-Site Scripting (XSS) (CVE-2026-2481) MEDIUM
- Drag And Drop Website Builder - Security Vulnerability (CVE-2026-2442) MEDIUM
- Drag And Drop Website Builder - Cross-Site Scripting (XSS) (CVE-2026-1231) MEDIUM
- Drag And Drop Website Builder - Security Vulnerability (CVE-2025-12366) MEDIUM
- Drag And Drop Website Builder - Cross-Site Scripting (XSS) (CVE-2025-4223) MEDIUM
- Drag And Drop Website Builder - Cross-Site Scripting (XSS) (CVE-2024-13427) MEDIUM
- Drag And Drop Website Builder - Improper Input Validation (CVE-2025-2104) MEDIUM
- Drag And Drop Website Builder - Information Disclosure (CVE-2024-13430) MEDIUM
- Drag And Drop Website Builder - Cross-Site Request Forgery (CSRF) (CVE-2025-1926) MEDIUM
- Drag And Drop Website Builder - Cross-Site Scripting (XSS) (CVE-2024-2504) MEDIUM
- Drag And Drop Website Builder - Cross-Site Scripting (XSS) (CVE-2024-2127) MEDIUM
- Drag And Drop Website Builder - Cross-Site Scripting (XSS) (CVE-2024-1590) MEDIUM
- Drag And Drop Website Builder - Cross-Site Scripting (XSS) (CVE-2023-6738) MEDIUM