| CVE-2026-119165 |
WPBakery Page Builder <= 9.0.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Post Author Display Name
|
6.4
Moyenne
|
7 nov. 2026 |
| CVE-2026-15101 |
The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data' parameter…
|
6.4
Moyenne
|
1 sept. 2026 |
| CVE-2025-10006 |
The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's…
|
6.4
Moyenne
|
18 oct. 2025 |
| CVE-2025-11161 |
The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the vc_custom_heading…
|
6.4
Moyenne
|
15 oct. 2025 |
| CVE-2025-11160 |
The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Custom JS module…
|
6.4
Moyenne
|
15 oct. 2025 |
| CVE-2025-7502 |
The WPBakery Page Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several…
|
6.4
Moyenne
|
6 août 2025 |
| CVE-2025-4968 |
The WPBakery Page Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple…
|
6.4
Moyenne
|
24 juil. 2025 |
| CVE-2025-4965 |
The WPBakery Page Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the…
|
6.4
Moyenne
|
19 juin 2025 |
| CVE-2024-5709 |
The WPBakery Visual Composer plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and…
|
8.8
Élevée
|
6 août 2024 |
| CVE-2024-5708 |
The WPBakery Visual Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘link’…
|
6.4
Moyenne
|
6 août 2024 |
| CVE-2024-5265 |
The WPBakery Visual Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the link attribute…
|
6.4
Moyenne
|
13 juin 2024 |
| CVE-2024-1840 |
The wpbakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Author tag attribute in…
|
6.4
Moyenne
|
2 mai 2024 |
| CVE-2024-1805 |
The wpbakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the button onclick attribute in all…
|
6.4
Moyenne
|
2 mai 2024 |
| CVE-2024-1842 |
The wpbakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Custom Heading tag attribute in…
|
6.4
Moyenne
|
2 mai 2024 |
| CVE-2024-1841 |
The wpbakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Title tag attribute in all…
|
6.4
Moyenne
|
2 mai 2024 |