Pootle Pagebuilder – WordPress Page builder

Pootle Pagebuilder – WordPress Page builder has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2024; 1 is fixed and 2 remain unpatched as of October 2026. Their average CVSS score is 6.3, and the most serious one scores 6.4 out of 10.

The most common weakness is Improper Neutralization Of Input During Web Page Generation, behind 2 of the records (67%). Other recurring categories include Missing Authorization.

1 of the records (33%) have a vendor fix, while 2 remain unpatched. The oldest unresolved one dates back to 2023.

2 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSMedium

6.3/ 10

Patch Coverage33%

Open

Fixed

Get automatic notifications for all Pootle Pagebuilder – WordPress Page builder vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2024-34573

Pootle Pagebuilder – WordPress Page builder <= 5.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

3 records


2024-05-07 00:00	Pootle Pagebuilder – WordPress Page builder <= 5.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting Pootle Pagebuilder <= 5.7.1	`CVE-2024-34573`	6.4 Medium	SavPhill (Savphill)	No
2023-07-18 00:00	Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get Pootle Pagebuilder 2.0.0 – 5.7.1	`CVE-2023-33999`	6.1 Medium	Rafie Muhammad	No
2022-03-04 00:00	Freemius SDK <= 2.4.2 - Missing Authorization Checks Pootle Pagebuilder < 5.7.1	`CVE-2022-4974`	6.3 Medium	Anonymous	Yes

Showing 1–3 of 3 reports