Skip to contentWpbakery Page Builder vulnerabilities
- wpbakery page builderWPBakery Page Builder <= 9.0.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Post Author Display NameCVE-2026-1191656.4 Medium
- wpbakery page builderWPBakery Page Builder <= 8.7.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'data' ParameterCVE-2026-151016.4 Medium
- rain-task ltd. wpbakery page builder, wpbakery page builder +1 moreWordPress WPBakery Page Builder plugin <= 8.7.2 - Broken Access Control vulnerabilityCVE-2026-454366.5 Medium
- wpbakery page builderWPBakery Page Builder <= 8.6 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2025-100066.4 Medium
- wpbakery page builderWPBakery Page Builder <= 8.6.1 - Stored Cross-Site Scripting via vc_custom_heading ShortcodeCVE-2025-111616.4 Medium
- wpbakery page builderWPBakery Page Builder <= 8.6.1 - Stored Cross-Site Scripting via Custom JS ModuleCVE-2025-111606.4 Medium
- wpbakery page builderWPBakery Page Builder for WordPress <= 8.5 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2025-75026.4 Medium
- wpbakery page builderWPBakery Page Builder <= 8.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Page Builder ElementsCVE-2025-49686.4 Medium
- wpbakery page builderWPBakery Page Builder <= 8.4.1 - Authenticated (Author+) Stored Cross-Site Scripting via Grid BuilderCVE-2025-49656.4 Medium
- wpbakery visual composer, page builder +1 moreWPBakery <= 7.7 - Authenticated (Author+) Local File InclusionCVE-2024-57098.8 High
- wpbakery page builderWPBakery <= 7.7 - Authenticated (Author+) Stored Cross-Site ScriptingCVE-2024-57086.4 Medium
- wpbakery page builder, wpbakery page builder clipboard project page builder clipboard +1 moreWPBakery Page Builder <= 7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via VC Single Image link attributeCVE-2024-52656.4 Medium
- wpbakery page builderWPBakery Visual Composer <= 7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post AuthorCVE-2024-18406.4 Medium
- wpbakery visual composer, page builder +1 moreWPBakery Visual Composer <= 7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button onclick attributeCVE-2024-18056.4 Medium
- wpbakery page builderWPBakery Visual Composer <= 7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Heading tag attributeCVE-2024-18426.4 Medium
- wpbakery page builderWPBakery Visual Composer <= 7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title tag attributeCVE-2024-18416.4 Medium
- wpbakery page builderWordPress WPBakery Page Builder Plugin < 6.13.0 is vulnerable to Cross Site Scripting (XSS)CVE-2023-312136.5 Medium