Wpbakery vulnerabilities

Products

• Page Builder 16
• Page Builder 14
• Visual Composer 2

Newest

• wpbakery page builder WPBakery Page Builder <= 8.7.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'data' Parameter CVE-2026-15101 6.4 MediumSeptember 1, 2026
• rain-task ltd. wpbakery page builder, wpbakery page builder +1 more WordPress WPBakery Page Builder plugin <= 8.7.2 - Broken Access Control vulnerability CVE-2026-45436 6.5 MediumJune 17, 2026
• wpbakery page builder WPBakery Page Builder <= 8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-10006 6.4 MediumOctober 18, 2025
• wpbakery page builder WPBakery Page Builder <= 8.6.1 - Stored Cross-Site Scripting via vc_custom_heading Shortcode CVE-2025-11161 6.4 MediumOctober 15, 2025
• wpbakery page builder WPBakery Page Builder <= 8.6.1 - Stored Cross-Site Scripting via Custom JS Module CVE-2025-11160 6.4 MediumOctober 15, 2025
• wpbakery templatera WordPress Templatera Plugin <= 2.3.0 - Cross Site Scripting (XSS) Vulnerability CVE-2025-54747 6.5 MediumAugust 14, 2025
• wpbakery page builder WPBakery Page Builder for WordPress <= 8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-7502 6.4 MediumAugust 6, 2025
• wpbakery page builder WPBakery Page Builder <= 8.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Page Builder Elements CVE-2025-4968 6.4 MediumJuly 24, 2025
• wpbakery page builder WPBakery Page Builder <= 8.4.1 - Authenticated (Author+) Stored Cross-Site Scripting via Grid Builder CVE-2025-4965 6.4 MediumJune 19, 2025
• classic addons – wpbakery page builder, webcodingplace classic addons – wpbakery page builder, wpbakery page builder +2 more WordPress Classic Addons – WPBakery Page Builder plugin <= 3.5 - Cross Site Scripting (XSS) vulnerability CVE-2024-43953 6.5 MediumAugust 29, 2024
• wpbakery visual composer, page builder +1 more WPBakery <= 7.7 - Authenticated (Author+) Local File Inclusion CVE-2024-5709 8.8 HighAugust 6, 2024
• wpbakery page builder WPBakery <= 7.7 - Authenticated (Author+) Stored Cross-Site Scripting CVE-2024-5708 6.4 MediumAugust 6, 2024
• wpbakery page builder, wpbakery page builder clipboard project page builder clipboard +1 more WPBakery Page Builder <= 7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via VC Single Image link attribute CVE-2024-5265 6.4 MediumJune 13, 2024
• wpbakery page builder WPBakery Visual Composer <= 7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Author CVE-2024-1840 6.4 MediumMay 2, 2024
• wpbakery visual composer, page builder +1 more WPBakery Visual Composer <= 7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button onclick attribute CVE-2024-1805 6.4 MediumMay 2, 2024
• wpbakery page builder WPBakery Visual Composer <= 7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Heading tag attribute CVE-2024-1842 6.4 MediumMay 2, 2024
• wpbakery page builder WPBakery Visual Composer <= 7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title tag attribute CVE-2024-1841 6.4 MediumMay 2, 2024
• wpbakery page builder WordPress WPBakery Page Builder Plugin < 6.13.0 is vulnerable to Cross Site Scripting (XSS) CVE-2023-31213 6.5 MediumJune 22, 2023
• wpbakery page builder The WPBakery plugin before 6.4.1 for WordPress allows XSS because it calls kses_remove_filters to... CVE-2020-28650 6.4 MediumNovember 16, 2020