Page Builder Sandwich – Front End WordPress Page Builder Plugin

Page Builder Sandwich – Front End WordPress Page Builder Plugin has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2024; 1 is fixed and 4 remain unpatched as of September 2026. Their average CVSS score is 6.0, and the most serious one scores 6.5 out of 10. 2024 was the busiest year with 4 disclosures.

The most common weakness is Missing Authorization, behind 4 of the records (80%). Other recurring categories include Cross-Site Scripting.

1 of the records (20%) have a vendor fix, while 4 remain unpatched. The oldest unresolved one dates back to 2024.

2 independent researchers contributed these findings, most of them (2) reported by Krzysztof Zając.

Strategic Overview

Avg CVSSMedium

6.0/ 10

Patch Coverage20%

Open

Fixed

Get automatic notifications for all Page Builder Sandwich – Front End WordPress Page Builder Plugin vulnerabilities before they are exploited.

Most severe open issueCVSS 6.5CVE-2024-1285

Page Builder Sandwich <= 5.1.0 - Missing Authorization to Authenticated(Subscriber+) Arbitrary Post Editing

Read the full analysis

Vulnerability Records

5 records


2024-06-21 00:00	Page Builder Sandwich – Front-End Page Builder <= 5.1.0 - Missing Authorization Page Builder Sandwich <= 5.1.0	`CVE-2024-37218`	4.3 Medium	SavPhill (Savphill)	No
2024-06-21 00:00	Page Builder Sandwich – Front-End Page Builder <= 5.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting Page Builder Sandwich <= 5.1.0	`CVE-2024-37219`	6.4 Medium	SavPhill (Savphill)	No
2024-03-04 00:00	Page Builder Sandwich <= 5.1.0 - Missing Authorization to Authenticated(Subscriber+) Arbitrary Post Editing Page Builder Sandwich <= 5.1.0	`CVE-2024-1285`	6.5 Medium	Krzysztof Zając	No
2024-03-04 00:00	Page Builder Sandwich – Front End WordPress Page Builder Plugin <= 5.1.0 - Sensitive Information Exposure Page Builder Sandwich <= 5.1.0	`CVE-2024-1381`	6.5 Medium	Krzysztof Zając	No
2022-03-04 00:00	Freemius SDK <= 2.4.2 - Missing Authorization Checks Page Builder Sandwich < 4.5.5	`CVE-2022-4974`	6.3 Medium	Anonymous	Yes

Showing 1–5 of 5 reports