CVE-2024-13582

CVE-2024-13582 affects the WordPress plugin “Simple Pricing Tables For WPBakery Page Builder (Formerly Visual Composer)” and enables a Stored Cross-Site Scripting (XSS) via the shortcode wdo_simple_pricing_table_free. The root cause is insufficient input sanitization and output escaping on user-s...

CVE-2024-13582 Simple Pricing Tables For WPBakery Page Builder(Formerly Visual Composer) <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Simple Pricing Tables For WPBakery Page BuilderFormerly Visual Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wdosimplepricingtablefree' shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping...

WordPress Simple Pricing Tables For WPBakery Page Builder plugin <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin Simple Pricing Tables For WPBakery Page Builder versions = 1.0...

CVE-2024-56286

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in webcodingplace Classic Addons – WPBakery Page Builder classic-addons-wpbakery-page-builder-addons allows PHP Local File Inclusion.This issue affects Classic Addons – WPBakery Page Builder: from n/a throu...

CVE-2024-5709

The WPBakery Visual Composer plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 7.7 via the 'layoutname' parameter. This makes it possible for authenticated attackers, with Author-level access and above, and with post permissions granted by an...

CVE-2024-11952

The Classic Addons – WPBakery Page Builder plugin for WordPress is vulnerable to Limited Local PHP File Inclusion in all versions up to, and including, 3.0 via the 'style' parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, and permissions grant...

CVE-2025-23775

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WWP GMAPS for WPBakery Page Builder Free gmaps-for-visual-composer-free allows Stored XSS.This issue affects GMAPS for WPBakery Page Builder Free: from n/a through = 1.2...

CVE-2025-23775

CVE-2025-23775 (GMAPS for WPBakery Page Builder Free) Improper Neutralization of Input During Web Page Generation enables a Stored XSS in GMAPS for WPBakery Page Builder Free. Affected: GMAPS for WPBakery Page Builder Free from n/a through 1.2. Root cause: input is not properly sanitized before e...

CVE-2025-23775 WordPress GMAPS for WPBakery Page Builder Free Plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WWP GMAPS for WPBakery Page Builder Free gmaps-for-visual-composer-free allows Stored XSS.This issue affects GMAPS for WPBakery Page Builder Free: from n/a through = 1.2...

WordPress GMAPS for WPBakery Page Builder Free Plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin GMAPS for WPBakery Page Builder Free versions = 1.2...

PT-2025-5081 · Wpbakery · Gmaps For Wpbakery Page Builder

Name of the Vulnerable Software and Affected Versions: GMAPS for WPBakery Page Builder Free versions n/a through 1.2 Description: The issue is related to improper neutralization of input during web page generation, which allows for stored Cross-site Scripting XSS. This means that an attacker can...

CVE-2024-12520 Dominion – Domain Checker for WPBakery <= 2.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Dominion – Domain Checker for WPBakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'dominionshortcodesdomainsearch6' shortcode in all versions up to, and including, 2.2.2 due to insufficient input sanitization and output escaping on user supplied...

CVE-2024-12520

CVE-2024-12520 concerns the Dominion – Domain Checker for WPBakery WordPress plugin. The connected sources confirm a Stored Cross-Site Scripting (XSS) vulnerability in the plugin’s shortcodes domain_search_6 (name variant dominion_shortcodes_domain_search_6) that affects all versions up to 2.2.2,...

CVE-2024-56286

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in webcodingplace Classic Addons – WPBakery Page Builder classic-addons-wpbakery-page-builder-addons allows PHP Local File Inclusion.This issue affects Classic Addons – WPBakery Page Builder: from n/a throu...

CVE-2024-56286 WordPress Classic Addons – WPBakery Page Builder plugin <= 3.0 - Local File Inclusion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Classic Addons Classic Addons – WPBakery Page Builder allows PHP Local File Inclusion.This issue affects Classic Addons – WPBakery Page Builder: from n/a through 3.0...

CVE-2024-56286

CVE-2024-56286 affects Classic Addons – WPBakery Page Builder. Root cause: Improper limitation of a pathname to a restricted directory enabling PHP Local File Inclusion. Impact: potential local file inclusion/read access. Affected: Classic Addons – WPBakery Page Builder (versions up to 3.0). Reme...

PT-2025-3249 · WordPress · Classic Addons – Wpbakery Page Builder

Name of the Vulnerable Software and Affected Versions: Classic Addons – WPBakery Page Builder versions prior to 3.0 Description: The issue is related to an improper limitation of a pathname to a restricted directory, also known as a 'Path Traversal' vulnerability. This allows for PHP Local File...

WordPress Classic Addons – WPBakery Page Builder plugin <= 3.0 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin Classic Addons – WPBakery Page Builder versions = 3.0...

CVE-2024-53747

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nutttaro Video Player for WPBakery video-player-for-wpbakery allows Stored XSS.This issue affects Video Player for WPBakery: from n/a through = 1.0.1...

CVE-2024-53747 WordPress Video Player for WPBakery plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nutttaro Video Player for WPBakery video-player-for-wpbakery allows Stored XSS.This issue affects Video Player for WPBakery: from n/a through = 1.0.1...