Gpriday Siteorigin Css vulnerabilities

2 CVEs affecting Gpriday Siteorigin Css, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-111122, published 2026-10-16.

More from Gpriday.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-111122, published 2026-10-16. High severity, CVSS 7.2. EPSS: 0.2% chance of exploitation in the next 30 days. The SiteOrigin CSS plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'href' parameter in all versions up to, and including, 1.6.7 due to insufficient input…
• CVE-2026-107764, published 2026-10-16. High severity, CVSS 7.2. EPSS: 0.2% chance of exploitation in the next 30 days. The SiteOrigin CSS plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'url (comment_author_url)' parameter in all versions up to, and including, 1.6.7 due to…