| CVE-2026-119165 |
WPBakery Page Builder <= 9.0.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Post Author Display Name
|
6.4
Medium
|
Nov 7, 2026 |
| CVE-2026-15101 |
The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data' parameter…
|
6.4
Medium
|
Sep 1, 2026 |
| CVE-2025-10006 |
The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's…
|
6.4
Medium
|
Oct 18, 2025 |
| CVE-2025-11161 |
The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the vc_custom_heading…
|
6.4
Medium
|
Oct 15, 2025 |
| CVE-2025-11160 |
The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Custom JS module…
|
6.4
Medium
|
Oct 15, 2025 |
| CVE-2025-7502 |
The WPBakery Page Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several…
|
6.4
Medium
|
Aug 6, 2025 |
| CVE-2025-4968 |
The WPBakery Page Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple…
|
6.4
Medium
|
Jul 24, 2025 |
| CVE-2025-4965 |
The WPBakery Page Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the…
|
6.4
Medium
|
Jun 19, 2025 |
| CVE-2024-5709 |
The WPBakery Visual Composer plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and…
|
8.8
High
|
Aug 6, 2024 |
| CVE-2024-5708 |
The WPBakery Visual Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘link’…
|
6.4
Medium
|
Aug 6, 2024 |
| CVE-2024-5265 |
The WPBakery Visual Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the link attribute…
|
6.4
Medium
|
Jun 13, 2024 |
| CVE-2024-1840 |
The wpbakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Author tag attribute in…
|
6.4
Medium
|
May 2, 2024 |
| CVE-2024-1805 |
The wpbakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the button onclick attribute in all…
|
6.4
Medium
|
May 2, 2024 |
| CVE-2024-1842 |
The wpbakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Custom Heading tag attribute in…
|
6.4
Medium
|
May 2, 2024 |
| CVE-2024-1841 |
The wpbakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Title tag attribute in all…
|
6.4
Medium
|
May 2, 2024 |