Skip to content

Known vulnerabilities in WPBakery Visual Composer

Is your version affected?

CVE Summary Score Published
CVE-2025-4968 The WPBakery Page Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple… 6.4 Medium Jul 24, 2025
CVE-2024-5709 The WPBakery Visual Composer plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and… 8.8 High Aug 6, 2024
CVE-2024-5708 The WPBakery Visual Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘link’… 6.4 Medium Aug 6, 2024
CVE-2024-5265 The WPBakery Visual Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the link attribute… 6.4 Medium Jun 13, 2024
CVE-2024-1840 The wpbakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Author tag attribute in… 6.4 Medium May 2, 2024
CVE-2024-1805 The wpbakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the button onclick attribute in all… 6.4 Medium May 2, 2024
CVE-2024-1842 The wpbakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Custom Heading tag attribute in… 6.4 Medium May 2, 2024
CVE-2024-1841 The wpbakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Title tag attribute in all… 6.4 Medium May 2, 2024

Other WPBakery products