CVE-2020-13642

The Page Builder by SiteOrigin plugin contained a cross-site request forgery vulnerability that could enable attackers to trick authenticated users into performing unintended actions on their accounts. An attacker could exploit this flaw by crafting a malicious request that would execute under the privileges of a targeted user who visits a compromised page. The vulnerability was present in versions prior to 2.10.16, where it has been patched and resolved.

Based on public CVE data (MITRE/NVD).