CVE-2017-18604: Sitebuilder Dynamic Components Project Sitebuilder Dynamic Components

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

The sitebuilder-dynamic-components plugin through 1.0 for WordPress has PHP object injection via an AJAX request.

Affected products

• Sitebuilder Dynamic Components Project Sitebuilder Dynamic Components: up to and including 1.0

Published 2019-09-10. Last modified 2026-06-17.