Login Request a demo
WP
Product
WPBakery Page Builder
by wpbakery · last CVE Sep 1, 2026
14
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities14In the news0Timeline
Severity mix
Critical 0High 1Medium 13Low 0
Severity
All severities14Critical0High1Medium13Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add WPBakery Page Builder to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-5709
8.8
1%
Aug 6
WPBakery <= 7.7 - Authenticated (Author+) Local File Inclusion
Affected: through 7.7
CVE-2026-15101
6.4
0%
Sep 1
WPBakery Page Builder <= 8.7.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'data' Parameter
Affected: through 8.7.4
CVE-2025-10006
5.4
0%
Oct 18
WPBakery Page Builder <= 8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: through 8.6
CVE-2025-11160
5.4
0%
Oct 15
WPBakery Page Builder <= 8.6.1 - Stored Cross-Site Scripting via Custom JS Module
Affected: through 8.6.1
CVE-2025-11161
5.4
0%
Oct 15
WPBakery Page Builder <= 8.6.1 - Stored Cross-Site Scripting via vc_custom_heading Shortcode
Affected: through 8.6.1
CVE-2025-7502
5.4
0%
Aug 6
WPBakery Page Builder for WordPress <= 8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: through 8.5
CVE-2025-4968
5.4
0%
Jul 24
WPBakery Page Builder <= 8.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Page Builder Elements
Affected: through 8.4.1
CVE-2025-4965
5.4
0%
Jun 19
WPBakery Page Builder <= 8.4.1 - Authenticated (Author+) Stored Cross-Site Scripting via Grid Builder
Affected: through 8.4.1
CVE-2024-5708
5.4
0%
Aug 6
WPBakery <= 7.7 - Authenticated (Author+) Stored Cross-Site Scripting
Affected: through 7.7
CVE-2024-5265
5.4
0%
Jun 13
WPBakery Page Builder <= 7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via VC Single Image link attribute
Affected: through 7.6
CVE-2024-1840
5.4
0%
May 2
WPBakery Visual Composer <= 7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Author
Affected: through 7.5
CVE-2024-1805
5.4
0%
May 2
WPBakery Visual Composer <= 7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button onclick attribute
Affected: through 7.5
CVE-2024-1842
5.4
0%
May 2
WPBakery Visual Composer <= 7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Heading tag attribute
Affected: through 7.5
CVE-2024-1841
5.4
0%
May 2
WPBakery Visual Composer <= 7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title tag attribute
Affected: through 7.5
Showing 14