WP
Vendor
Wpbakery
31
CVEs
0
On KEV
0
New 30D
Products
PB8.8
Page Builder
Wpbakery
14 CVEs0 on KEV0 new
WP8.8
WPBakery Page Builder
wpbakery
14 CVEs0 on KEV0 new
WV8.8
Wpbakery Visual Composer
Wpbakery
2 CVEs0 on KEV0 new
TE6.5
Templatera
wpbakery
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-15101 | WP WPBakery Page Builder wpbakery | 6.4 | Sep 1 | WPBakery Page Builder <= 8.7.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'data' Parameter |
| CVE-2025-10006 | WP WPBakery Page Builder wpbakery | 5.4 | Oct 18 | WPBakery Page Builder <= 8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2025-11160 | WP WPBakery Page Builder wpbakery | 5.4 | Oct 15 | WPBakery Page Builder <= 8.6.1 - Stored Cross-Site Scripting via Custom JS Module |
| CVE-2025-11161 | WP WPBakery Page Builder wpbakery | 5.4 | Oct 15 | WPBakery Page Builder <= 8.6.1 - Stored Cross-Site Scripting via vc_custom_heading Shortcode |
| CVE-2025-54747 | TE Templatera wpbakery | 6.5 | Aug 14 | WordPress Templatera Plugin <= 2.3.0 - Cross Site Scripting (XSS) Vulnerability |
| CVE-2025-7502 | WP WPBakery Page Builder wpbakery | 5.4 | Aug 6 | WPBakery Page Builder for WordPress <= 8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2025-4968 | WP WPBakery Page Builder wpbakery | 5.4 | Jul 24 | WPBakery Page Builder <= 8.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Page Builder Elements |
| CVE-2025-4965 | WP WPBakery Page Builder wpbakery | 5.4 | Jun 19 | WPBakery Page Builder <= 8.4.1 - Authenticated (Author+) Stored Cross-Site Scripting via Grid Builder |
| CVE-2024-43953 | PB Page Builder Wpbakery | 5.4 | Aug 29 | WordPress Classic Addons – WPBakery Page Builder plugin <= 3.5 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-5709 | WP WPBakery Page Builder wpbakery | 8.8 | Aug 6 | WPBakery <= 7.7 - Authenticated (Author+) Local File Inclusion |
| CVE-2024-5708 | WP WPBakery Page Builder wpbakery | 5.4 | Aug 6 | WPBakery <= 7.7 - Authenticated (Author+) Stored Cross-Site Scripting |
| CVE-2024-5265 | WP WPBakery Page Builder wpbakery | 5.4 | Jun 13 | WPBakery Page Builder <= 7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via VC Single Image link attribute |
| CVE-2024-1840 | WP WPBakery Page Builder wpbakery | 5.4 | May 2 | WPBakery Visual Composer <= 7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Author |
| CVE-2024-1805 | WP WPBakery Page Builder wpbakery | 5.4 | May 2 | WPBakery Visual Composer <= 7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button onclick attribute |
| CVE-2024-1842 | WP WPBakery Page Builder wpbakery | 5.4 | May 2 | WPBakery Visual Composer <= 7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Heading tag attribute |
| CVE-2024-1841 | WP WPBakery Page Builder wpbakery | 5.4 | May 2 | WPBakery Visual Composer <= 7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title tag attribute |
| CVE-2023-31213 | PB Page Builder Wpbakery | 5.4 | Jun 22 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WPBakery Page Builder plugin <= 6.13.0 versions |
| CVE-2020-28650 | PB Page Builder Wpbakery | 5.4 | Nov 16 | The WPBakery plugin before 6.4.1 for WordPress allows XSS because it calls kses_remove_filters to disable the standard WordPress XSS protection mechanism for the Author and… |