WordPress Plugin Vulnerabilities

Page Layout Builder 1.3.4 - includes/layout-settings.php layout_settings_id Parameter Reflected XSS

Description

The page-layout-builder WordPress plugin was affected by an includes/layout-settings.php layout_settings_id Parameter Reflected XSS security vulnerability.

Affects Plugins

Plugin icon
page-layout-builder
Fixed in 1.3.6

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
98f800af-4633-492a-8ee0-89c07abfc717

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-05-15 (about 10 years ago)

Other

Published
Title
Published
2024-10-15
Title
ElementInvader Addons for Elementor < 1.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2014-08-01
Title
Xorbin Digital Flash Clock 1.0 - Flash-based XSS
Published
2025-06-11
Title
eForm - WordPress Form Builder < 4.19.1 - Reflected Cross-Site Scripting
Published
2025-09-22
Title
Penci Filter Everything < 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2025-07-25
Title
Educenter < 1.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting