WordPress plugin
Zion Builder – Website Builder for Speed & Creativity security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High0
- Medium3
- Low0
All Zion Builder – Website Builder for Speed & Creativity vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.4 | Authenticated (Author+) Stored Cross-Site Scripting ≤3.6.17No patch available | CVE-2026-104676 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting ≤3.6.16Update to 3.6.17 | CVE-2024-54213 | |
| Medium4.4 | Authenticated (Editor+) Stored Cross-Site Scripting ≤3.6.9Update to 3.6.10 | CVE-2024-30444 |
- Medium6.4Authenticated (Author+) Stored Cross-Site Scripting
≤3.6.17No patch available
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤3.6.16Update to 3.6.17
- Medium4.4Authenticated (Editor+) Stored Cross-Site Scripting
≤3.6.9Update to 3.6.10
Zion Builder – Website Builder for Speed & Creativity: common questions
Does Zion Builder – Website Builder for Speed & Creativity have known vulnerabilities?
Yes. VulnCrest Radar lists 3 known vulnerabilities in Zion Builder – Website Builder for Speed & Creativity: 3 medium. At least one is not fixed in the latest version.
How do I check which version of Zion Builder – Website Builder for Speed & Creativity I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Zion Builder – Website Builder for Speed & Creativity vulnerability?
CVE-2026-104676, published Nov 10, 2026: Zion Builder – Website Builder for Speed & Creativity <= 3.6.17 - Authenticated (Author+) Stored Cross-Site Scripting. Severity: Medium (CVSS 6.4).
Is any Zion Builder – Website Builder for Speed & Creativity vulnerability listed in CISA KEV?
No. None of the known Zion Builder – Website Builder for Speed & Creativity vulnerabilities is currently listed in the CISA KEV catalog.