Read the docs

offsprout

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

offsprout records in CISA KEV

No offsprout vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2025-04170 CVE-2025-4672 · GHSA-fvwx-hjg7-fmc3

Improper authorization in Offsprout Page Builder

Priority MEDIUM 40

The Offsprout Page Builder plugin for WordPress is vulnerable to Privilege Escalation due to improper authorization placed on the permission_callback() function in versions 2.2.1 to 2.15.2.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0045 Published 2025-05-31 No fix listed CWE-285
Open these records in search →