← WordPress Vulnerabilities
WordPress security by component

Offsprout Page Builder

Offsprout Page Builder is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published May 31, 2025; the highest CVE/CNA score is 8.8.

Plugin slug: offsprout-page-builder

CVE-2025-4672: Offsprout Page Builder: Privilege escalation or authentication bypass

Offsprout Page Builder is affected by privilege escalation or authentication bypass. Exploitation requires at least contributor-level access. A successful request can grant permissions or access that the caller should not possess.

PublishedMay 31, 2025
Safe version guidanceSee mitigation notes
Safe version
May 31, 2025 CVE-2025-4672
Offsprout Page Builder: Privilege escalation or authentication bypass
Offsprout Page Builder is affected by privilege escalation or authentication bypass. Exploitation requires at least contributor-level access. A successful request can grant permissions or access that the caller should not possess.
See mitigation notes
CVE8.8
NVDPending