WordPress security by component

SiteBuilder Dynamic Components

Plugin description

SiteBuilder Dynamic Components is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Oct 20, 2024; the highest CVE/CNA score is 9.8.

Plugin slug: sitebuilder-dynamic-components

Latest vulnerability

CVE-2024-49625: SiteBuilder Dynamic Components: Code execution

SiteBuilder Dynamic Components is affected by code execution. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can run attacker-controlled code in the WordPress hosting account.

PublishedOct 20, 2024

Safe version guidanceSee mitigation notes

		Safe version
Oct 20, 2024	CVE-2024-49625 SiteBuilder Dynamic Components: Code execution SiteBuilder Dynamic Components is affected by code execution. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can run attacker-controlled code in the WordPress hosting account.	See mitigation notes	CVE9.8 NVD9.8
Sep 10, 2019	CVE-2017-18604 Sitebuilder Dynamic Components: Code execution Sitebuilder Dynamic Components is affected by code execution. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can run attacker-controlled code in the WordPress hosting account.	See mitigation notes	CVE7.5 NVD7.5