4 matches found
EUVD-2025-206055
Missing Authorization vulnerability in merkulove Worker for WPBakery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Worker for WPBakery: from n/a through 1.1.1...
CVE-2024-53747
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nutttaro Video Player for WPBakery video-player-for-wpbakery allows Stored XSS.This issue affects Video Player for WPBakery: from n/a through = 1.0.1...
CVE-2024-12520 Dominion – Domain Checker for WPBakery <= 2.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
The Dominion – Domain Checker for WPBakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'dominionshortcodesdomainsearch6' shortcode in all versions up to, and including, 2.2.2 due to insufficient input sanitization and output escaping on user supplied...
CVE-2024-12520
CVE-2024-12520 concerns the Dominion – Domain Checker for WPBakery WordPress plugin. The connected sources confirm a Stored Cross-Site Scripting (XSS) vulnerability in the plugin’s shortcodes domain_search_6 (name variant dominion_shortcodes_domain_search_6) that affects all versions up to 2.2.2,...