CVE-2023-31213 Auth

Description

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WPBakery Page Builder plugin <= 6.13.0 versions.

Affected products and versions

Product	Affected versions	Fixed in
WPBakery Page Builder 6.13	earliest → < 6.13.0	6.13.0

Other CVEs of WPBakery Page Builder

The 16 CVEs of WPBakery Page Builder →

CVE-2026-119165 WPBakery Page Builder <= 9.0.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Post Author Display Name 6.4 Medium CVE-2026-15101 The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data' parameter… 6.4 Medium CVE-2025-10006 The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's… 6.4 Medium CVE-2025-11161 The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the vc_custom_heading… 6.4 Medium