Page Builder CVE-2023-52206

HIGH

Deserialization of Untrusted Data (CWE-502)

2024-01-08 audit@patchstack.com

Deserialization Page Builder Blueastral

7.7

CVSS 3.1 · NVD

Share

Severity by source

NVD PRIMARY

7.7 HIGH

AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

High

Privileges Required

High

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

None

Lifecycle Timeline

3

Re-analysis Queued

Apr 28, 2026 - 19:38 vuln.today

cvss_changed

Analysis Generated

Mar 28, 2026 - 19:34 vuln.today

CVE Published

Jan 08, 2024 - 20:15 nvd

HIGH 7.7

DescriptionCVE.org

Deserialization of Untrusted Data vulnerability in Live Composer Team Page Builder: Live Composer live-composer-page-builder.This issue affects Page Builder: Live Composer: from n/a through 1.5.25.

AnalysisAI

Deserialization in Live Composer page builder WordPress plugin.

Technical ContextAI

CWE-502.

RemediationAI

Update.

More in Page Builder

View all

CVE-2020-13643 HIGH This Week POC

An issue was discovered in the SiteOrigin Page Builder plugin before 2.10.16 for WordPress. Rated high severity (CVSS 8.

CVE-2020-13642 HIGH This Week POC

An issue was discovered in the SiteOrigin Page Builder plugin before 2.10.16 for WordPress. Rated high severity (CVSS 8.

CVE-2020-28650 MEDIUM This Month POC

The WPBakery plugin before 6.4.1 for WordPress allows XSS because it calls kses_remove_filters to disable the standard W

CVE-2024-5709 HIGH This Week

The WPBakery Visual Composer plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and inclu

CVE-2023-52193 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Live Composer Team

CVE-2024-4361 MEDIUM This Month

The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'siteo

CVE-2024-1842 MEDIUM This Month

The wpbakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Custom Heading tag attribute in a

CVE-2024-1841 MEDIUM This Month

The wpbakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Title tag attribute in all v

CVE-2024-1840 MEDIUM This Month

The wpbakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Author tag attribute in all

CVE-2024-1805 MEDIUM This Month

The wpbakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the button onclick attribute in all v

CVE-2024-2202 MEDIUM This Month

The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the legacy Image wi

CVE-2025-1459 MEDIUM This Month

The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Embedded Video(

Same weakness CWE-502 – Deserialization of Untrusted Data

View all

CVE-2021-35464 CRITICAL POC

CVE-2020-10189 CRITICAL POC

CVE-2019-18935 CRITICAL POC

CVE-2015-7450 CRITICAL POC

CVE-2025-53770 CRITICAL POC

CVE-2020-7961 CRITICAL POC

CVE-2021-42237 CRITICAL POC

CVE-2025-24016 CRITICAL POC

Same technique Deserialization

View all

CVE-2015-7450 CRITICAL POC

CVE-2025-53770 CRITICAL POC

CVE-2020-7961 CRITICAL POC

CVE-2021-42237 CRITICAL POC

CVE-2025-24016 CRITICAL POC

CVE-2020-0618 HIGH POC

CVE-2015-4852 CRITICAL POC

CVE-2025-49113 CRITICAL POC

Share

CVE-2023-52206 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy