CyberRota Analysis
AI-GeneratedPage Builder by SiteOrigin versions up to 2.36.0 are vulnerable to PHP Object Injection, which could allow an attacker to execute arbitrary code on the server. This high-severity vulnerability poses a significant risk to any sites utilizing the affected plugin, particularly those with inadequate input validation. Organizations using this plugin should prioritize immediate updates or mitigations to safeguard against potential exploitation.
CVE
CVE-2026-97256
Severity
HIGH
CVSS
7.2
EPSS
0.30%
Original NVD Description
Editor PHP Object Injection in Page Builder by SiteOrigin <= 2.36.0 versions.