Known vulnerabilities in gpriday SiteOrigin CSS
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-107764 | The SiteOrigin CSS plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'url… | 7.2 High | Oct 16, 2026 |
| CVE-2026-111122 | The SiteOrigin CSS plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'href'… | 7.2 High | Oct 16, 2026 |