Login Request a demo
PB
Product
Page Builder
by Wpbakery · last CVE Oct 18, 2025
14
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities14In the news1Timeline
Severity mix
Critical 0High 1Medium 13Low 0
Severity
All severities14Critical0High1Medium13Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Page Builder to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-5709
8.8
1%
Aug 6
WPBakery <= 7.7 - Authenticated (Author+) Local File Inclusion
Affected: before 7.8
CVE-2025-10006
5.4
0%
Oct 18
WPBakery Page Builder <= 8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: before 8.7
CVE-2025-11160
5.4
0%
Oct 15
WPBakery Page Builder <= 8.6.1 - Stored Cross-Site Scripting via Custom JS Module
Affected: before 8.7
CVE-2025-11161
5.4
0%
Oct 15
WPBakery Page Builder <= 8.6.1 - Stored Cross-Site Scripting via vc_custom_heading Shortcode
Affected: before 8.7
CVE-2025-7502
5.4
0%
Aug 6
WPBakery Page Builder for WordPress <= 8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: before 8.6
CVE-2025-4968
5.4
0%
Jul 24
WPBakery Page Builder <= 8.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Page Builder Elements
Affected: before 8.5
CVE-2025-4965
5.4
0%
Jun 19
WPBakery Page Builder <= 8.4.1 - Authenticated (Author+) Stored Cross-Site Scripting via Grid Builder
Affected: before 8.5
CVE-2024-43953
5.4
0%
Aug 29
WordPress Classic Addons – WPBakery Page Builder plugin <= 3.5 - Cross Site Scripting (XSS) vulnerability
Affected: through 3.0
CVE-2024-1840
5.4
0%
May 2
WPBakery Visual Composer <= 7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Author
Affected: before 7.6
CVE-2024-1805
5.4
0%
May 2
WPBakery Visual Composer <= 7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button onclick attribute
Affected: before 7.6
CVE-2024-1842
5.4
0%
May 2
WPBakery Visual Composer <= 7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Heading tag attribute
Affected: before 7.6
CVE-2024-1841
5.4
0%
May 2
WPBakery Visual Composer <= 7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title tag attribute
Affected: before 7.6
CVE-2023-31213
5.4
0%
Jun 22
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WPBakery Page Builder plugin <= 6.13.0 versions
Affected: before 6.13.0
CVE-2020-28650
5.4
1%
Nov 16
The WPBakery plugin before 6.4.1 for WordPress allows XSS because it calls kses_remove_filters to disable the standard WordPress XSS protection mechanism for the Author and…
Affected: before 6.4.1
Showing 14