WordPress plugin
Website Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 10 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High1
- Medium9
- Low0
All Website Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.4 | Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode <= 6.20.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'seedprodnestedmenuwidget' Shortcode ≤6.20.2Update to 6.20.3 | CVE-2025-14785 | |
| Medium5.5 | Authenticated (Editor+) Server-Side Request Forgery ≤6.19.8Update to 6.19.9 | CVE-2026-39464 | |
| Medium5.3 | Missing Authorization ≤6.19.8Update to 6.19.9 | CVE-2026-27368 | |
| Medium4.3 | Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure ≤6.18.15Update to 6.18.16 | CVE-2025-3949 | |
| Medium4.3 | Cross-Site Request Forgery ≤6.18.9Update to 6.18.10 | CVE-2025-24540 | |
| Medium4.4 | Authenticated (Editor+) Stored Cross-Site Scripting ≤6.17.4Update to 6.18.4 | CVE-2024-47299 | |
| Medium4.3 | Cross-Site Request Forgery to Notice Dismissal ≤6.15.20Update to 6.15.21 | CVE-2024-32088 | |
| High8.2 | Missing Authorization via seedprod_lite_new_lpage ≤6.15.21Update to 6.15.22 | CVE-2024-1072 | |
| Medium4.3 | Cross-Site Request Forgery to Settings Update ≤6.15.13.1Update to 6.15.15.3 | CVE-2023-4975 | |
| Medium6.4 | Authenticated Stored Cross-Site Scripting <5.1.2Update to 5.1.2 | CVE-2020-15038 |
- Medium6.4Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode <= 6.20.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'seedprodnestedmenuwidget' Shortcode
≤6.20.2Update to 6.20.3
- Medium5.5Authenticated (Editor+) Server-Side Request Forgery
≤6.19.8Update to 6.19.9
- Medium5.3Missing Authorization
≤6.19.8Update to 6.19.9
- Medium4.3Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure
≤6.18.15Update to 6.18.16
- Medium4.3Cross-Site Request Forgery
≤6.18.9Update to 6.18.10
- Medium4.4Authenticated (Editor+) Stored Cross-Site Scripting
≤6.17.4Update to 6.18.4
- Medium4.3Cross-Site Request Forgery to Notice Dismissal
≤6.15.20Update to 6.15.21
- High8.2Missing Authorization via seedprod_lite_new_lpage
≤6.15.21Update to 6.15.22
- Medium4.3Cross-Site Request Forgery to Settings Update
≤6.15.13.1Update to 6.15.15.3
- Medium6.4Authenticated Stored Cross-Site Scripting
<5.1.2Update to 5.1.2
Website Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode: common questions
Does Website Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode have known vulnerabilities?
Yes. VulnCrest Radar lists 10 known vulnerabilities in Website Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode: 1 high, 9 medium. None are known to affect version null.
How do I check which version of Website Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Website Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode vulnerability?
CVE-2025-14785, published Jul 7, 2026: Website Builder by SeedProd - Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode <= 6.20.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'seedprodnestedmenuwidget' Shortcode. Severity: Medium (CVSS 6.4).
Is any Website Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode vulnerability listed in CISA KEV?
No. None of the known Website Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode vulnerabilities is currently listed in the CISA KEV catalog.