CVE-2026-97256

Editor PHP Object Injection in Page Builder by SiteOrigin <= 2.36.0 versions.

Credits

Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program

References

https://patchstack.com/database/wordpress/plugin/siteorigin-panels/vulnerability/wordpress-page-builder-by-siteorigin-plugin-2-36-0-php-object-injection-vulnerability?_s_id=cve