Advisories · Technology
WPBakery Page Builder.
Every CVE that names WPBakery Page Builder among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.4 Medium
WPBakery Page Builder <= 9.0.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Post Author Display Name
- WPBakery Page Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
WPBakery Page Builder <= 8.7.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'data' Parameter
- WPBakery Page Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
WPBakery Page Builder <= 8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
- WPBakery Page Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
WPBakery Page Builder <= 8.6.1 - Stored Cross-Site Scripting via Custom JS Module
- WPBakery Page Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
WPBakery Page Builder <= 8.6.1 - Stored Cross-Site Scripting via vc_custom_heading Shortcode
- WPBakery Page Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
WPBakery Page Builder for WordPress <= 8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
- WPBakery Page Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
WPBakery Page Builder <= 8.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Page Builder Elements
- WPBakery Page Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
WPBakery Page Builder <= 8.4.1 - Authenticated (Author+) Stored Cross-Site Scripting via Grid Builder
- WPBakery Page Builder
- Cross-site scripting (XSS)
- CVSS 8.8 High
WPBakery <= 7.7 - Authenticated (Author+) Local File Inclusion
- WPBakery Page Builder
- Path traversal
- CVSS 6.4 Medium
WPBakery <= 7.7 - Authenticated (Author+) Stored Cross-Site Scripting
- WPBakery Page Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
WPBakery Page Builder <= 7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via VC Single Image link attribute
- WPBakery Page Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
WPBakery Visual Composer <= 7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Author
- WPBakery Page Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
WPBakery Visual Composer <= 7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button onclick attribute
- WPBakery Page Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
WPBakery Visual Composer <= 7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Heading tag attribute
- WPBakery Page Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
WPBakery Visual Composer <= 7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title tag attribute
- WPBakery Page Builder
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
WordPress WPBakery Page Builder Plugin < 6.13.0 is vulnerable to Cross Site Scripting (XSS)
- WPBakery Page Builder
- Cross-site scripting (XSS)