VYPR

WPBakery Page Builder

by WordPress

CVEs (13)

  • CVE-2026-81429HigSep 12, 2026
    risk 0.46cvss 7.1epss 0.00

    The Export & Import WPBakery Page Builder WordPress plugin through 1.0.2 does not perform any CSRF check on its template-import feature and does not sanitise the imported data before storing it and echoing it back, allowing attackers to make a logged-in administrator import a…

  • CVE-2026-15101MedSep 1, 2026
    risk 0.42cvss 6.4epss 0.00

    The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data' parameter in all versions up to, and including, 8.7.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with…

  • CVE-2026-45436MedJun 17, 2026
    risk 0.42cvss 6.5epss 0.00

    Subscriber Broken Access Control in WPBakery Page Builder <= 8.7.2 versions.

  • CVE-2025-10006MedOct 18, 2025
    risk 0.42cvss 6.4epss 0.00

    The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'rev_slider_vc' shortcode in all versions up to, and including, 8.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it…

  • CVE-2025-11161MedOct 15, 2025
    risk 0.42cvss 6.4epss 0.00

    The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the vc_custom_heading shortcode in all versions up to, and including, 8.6.1. This is due to insufficient restriction of allowed HTML tags and improper sanitization of user-supplied…

  • CVE-2025-11160MedOct 15, 2025
    risk 0.42cvss 6.4epss 0.00

    The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Custom JS module in all versions up to, and including, 8.6.1. This is due to insufficient input sanitization and output escaping of user-supplied JavaScript code in the Custom JS…

  • CVE-2025-7502MedAug 6, 2025
    risk 0.42cvss 6.4epss 0.00

    The WPBakery Page Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several shortcodes in all versions up to, and including, 8.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it…

  • CVE-2025-4968MedJul 24, 2025
    risk 0.42cvss 6.4epss 0.00

    The WPBakery Page Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple Page Builder elements (Copyright Element, Hover Box, Separator With Text, FAQ, Single Image, Custom Header, Button, Call To Action, Progress Bar, Pie Chart,…

  • CVE-2025-4965MedJun 19, 2025
    risk 0.42cvss 6.4epss 0.00

    The WPBakery Page Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Grid Builder feature in all versions up to, and including, 8.4.1 due to insufficient input sanitization and output escaping on user supplied attributes.…

  • CVE-2024-13591MedFeb 19, 2025
    risk 0.42cvss 6.4epss 0.00

    The Team Builder For WPBakery Page Builder(Formerly Visual Composer) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'team-builder-vc' shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output…

  • CVE-2023-31213MedJun 22, 2023
    risk 0.42cvss 6.5epss 0.00

    Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WPBakery Page Builder plugin <= 6.13.0 versions.

  • CVE-2021-24244MedMay 6, 2021
    risk 0.42cvss 6.5epss 0.01

    An AJAX action registered by the WPBakery Page Builder (Visual Composer) Clipboard WordPress plugin before 4.5.8 did not have capability checks, allowing low privilege users, such as subscribers, to update the license options (key, email).

  • CVE-2021-24243MedMay 6, 2021
    risk 0.35cvss 5.4epss 0.01

    An AJAX action registered by the WPBakery Page Builder (Visual Composer) Clipboard WordPress plugin before 4.5.6 did not have capability checks nor sanitization, allowing low privilege users (subscriber+) to call it and set XSS payloads, which will be triggered in all backend…