CVE-2024-4361

Page Builder by SiteOrigin <= 2.29.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'siteorigin_widget' Shortcode

The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'siteorigin_widget' shortcode in all versions up to, and including, 2.29.15 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

We have discovered 46,154 live websites that are affected by CVE-2024-4361.

Run a Free Instant Scan



Affected Software

Product  SiteOrigin Panels
Category Wordpress Plugins
Vulnerable Domains46,154 live websites (34% of SiteOrigin Panels install base)
Vulnerable Versions
  • from 0 through 2.29.15
Vulnerable Versions Count187 versions ( 85% of all versions)


Common Weakness Enumeration

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')



Details

  • Published - May 21, 2024
  • Updated - Apr 8, 2026

Credits

  • Matthew Rollings (finder)

Website Distribution by Country

Number of websites using CVE-2024-4361
United States8,454 websites


Germany5,356 websites
Japan3,935 websites
France2,590 websites
Italy2,358 websites
GB2,146 websites
Poland2,008 websites
Netherlands1,744 websites
Russia1,692 websites
Spain1,130 websites

Website Distribution by TLD

Number of websites using CVE-2024-4361
.com16,705 websites
.de3,402 websites
.it1,634 websites
.org1,603 websites
.nl1,531 websites
.pl1,485 websites
.ru1,359 websites
.co.uk1,300 websites
.net1,069 websites
.fr1,068 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2024-4361

Top websites that are affected by CVE-2024-4361. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
***************.org Israel**,***
**************.com United States**,***
*****.app Bulgaria**,***
*****************.com Singapore**,***
***********.com Canada**,***
******.org United States**,***
**************.com United States**,***
*******.org Turkey**,***
**********.it Italy***,***
**************.it Italy***,***
See full domain list

FAQ

CVE-2024-4361 is Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in SiteOrigin Panels
A total of 46,154 websites have been identified as vulnerable to CVE-2024-4361, based on global website indexing conducted by WebTechSurvey.
The SiteOrigin Panels is affected by the CVE-2024-4361 vulnerability.
SiteOrigin Panels versions up to and including 2.29.15 are vulnerable to CVE-2024-4361.