717 matches found
CVE-2025-6572
The OpenStreetMap for Gutenberg and WPBakery Page Builder formerly Visual Composer WordPress plugin through 1.2.0 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above...
WordPress OpenStreetMap for Gutenberg and WPBakery Page Builder plugin <= 1.2.0 - Contributor+ Stored XSS vulnerability
Contributor+ Stored XSS vulnerability discovered by Krugov Artyom in WordPress Plugin OpenStreetMap for Gutenberg and WPBakery Page Builder formerly Visual Composer versions = 1.2.0...
CVE-2025-6572 OpenStreetMap for Gutenberg and WPBakery Page Builder <= 1.2.0 - Contributor+ Stored XSS
The OpenStreetMap for Gutenberg and WPBakery Page Builder formerly Visual Composer WordPress plugin through 1.2.0 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above...
CVE-2025-6572
CVE-2025-6572 affects the WordPress plugin OpenStreetMap for Gutenberg and WPBakery Page Builder (formerly Visual Composer) up to and including version 1.2.0. The issue is that the plugin does not validate and escape certain block options before outputting them in a page/post where the block is e...
CVE-2025-6572 OpenStreetMap for Gutenberg and WPBakery Page Builder <= 1.2.0 - Contributor+ Stored XSS
The OpenStreetMap for Gutenberg and WPBakery Page Builder formerly Visual Composer WordPress plugin through 1.2.0 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above...
CVE-2025-7502
The WPBakery Page Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several shortcodes in all versions up to, and including, 8.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticat...
WordPress plugin OpenStreetMap for Gutenberg and WPBakery Page Builder 安全漏洞
WordPress OpenStreetMap for Gutenberg and WPBakery Page Builder plugin mainly provides the function of embedding interactive maps in the page, supporting customized locations, map styles, marker points and so on. The WordPress OpenStreetMap for Gutenberg and WPBakery Page Builder plugin suffers...
WordPress Multimedia Playlist Slider Addon for WPBakery Page Builder Plugin <= 2.1 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Multimedia Playlist Slider Addon for WPBakery Page Builder versions = 2.1...
CVE-2025-7502
The WPBakery Page Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several shortcodes in all versions up to, and including, 8.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticat...
CVE-2025-7502 WPBakery Page Builder for WordPress <= 8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
The WPBakery Page Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several shortcodes in all versions up to, and including, 8.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticat...
CVE-2025-7502 WPBakery Page Builder for WordPress <= 8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
The WPBakery Page Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several shortcodes in all versions up to, and including, 8.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticat...
CVE-2025-7502
The CVE-2025-7502 vulnerability affects the WPBakery Page Builder for WordPress plugin (WordPress). It is a Stored Cross-Site Scripting flaw in multiple shortcodes caused by insufficient input sanitization and output escaping of user-supplied attributes. Exploitation requires authentication at co...
WordPress plugin WPBakery Page Builder 跨站脚本漏洞
WordPress WPBakery Page Builder is a visual page builder plugin for the WordPress platform that enables complex layout design through a drag-and-drop interface to create responsive web pages without writing code. WordPress WPBakery Page Builder suffers from a cross-site scripting vulnerability th...
PT-2025-32036 · WordPress · Wpbakery Page Builder For Wordpress
Name of the Vulnerable Software and Affected Versions: WPBakery Page Builder for WordPress plugin versions prior to 8.6 Description: The WPBakery Page Builder for WordPress plugin is susceptible to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping on...
WordPress WPBakery Page Builder for WordPress plugin <= 8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by stealthcopter in WordPress Plugin WPBakery Page Builder versions = 8.5...
WordPress WPBakery Page Builder for WordPress Cross-Site Scripting Vulnerability
WordPress WPBakery Page Builder for WordPress is a powerful visual page builder plugin for the WordPress platform, providing an intuitive drag-and-drop interface and a wealth of preset templates, so that non-professional developers can quickly build responsive websites. WordPress WPBakery Page...
CVE-2025-4968
The WPBakery Page Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple Page Builder elements Copyright Element, Hover Box, Separator With Text, FAQ, Single Image, Custom Header, Button, Call To Action, Progress Bar, Pie Chart, Round Chart, and Line...
CVE-2025-4968
The WPBakery Page Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple Page Builder elements Copyright Element, Hover Box, Separator With Text, FAQ, Single Image, Custom Header, Button, Call To Action, Progress Bar, Pie Chart, Round Chart, and Line...
CVE-2025-4968 WPBakery Page Builder <= 8.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Page Builder Elements
The WPBakery Page Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple Page Builder elements Copyright Element, Hover Box, Separator With Text, FAQ, Single Image, Custom Header, Button, Call To Action, Progress Bar, Pie Chart, Round Chart, and Line...