Greg – SiteOrigin vulnerabilities
We track 2 vulnerabilities in Greg – SiteOrigin products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on January 2, 2025.
2vulnerabilities
0critical
2high
0exploited
8.0average CVSS score
Latest Greg – SiteOrigin vulnerabilities
- 7.1 High severity
Simple Proxy: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Greg – SiteOrigin Simple Proxy simple-proxy allows Reflected XSS.This issue affects Simple Proxy: from n/a through <= 1.0.
- 8.8 High severity
SiteOrigin Widgets Bundle: Missing Authorization
Missing Authorization vulnerability in Greg - SiteOrigin SiteOrigin Widgets Bundle so-widgets-bundle allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SiteOrigin Widgets Bundle: from n/a through <= 1.64.0.