Skip to content
Noroxi

wpbakery records

15 published records for vendor wpbakery.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
13.3%
Median publish → KEV
No record has entered KEV

Records by year

  1. 20
  2. 23
  3. 24
  4. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

15 records
  • CVE-2024-5709
    35Monitor

    WPBakery <= 7.7 - Authenticated (Author+) Local File Inclusion

    HighCVSS 8.8No exploitEPSS 1%

    wpbakery · page builderAug 6, 2024

  • CVE-2020-28650
    21Monitor

    The WPBakery plugin before 6.4.1 for WordPress allows XSS because it calls kses_remove_filters to disable the standard WordPress XSS protect

    MediumCVSS 5.4No exploitEPSS 1%

    wpbakery · page builderNov 16, 2020

  • CVE-2023-31213
    21Monitor

    WordPress WPBakery Page Builder Plugin < 6.13.0 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 5.4No exploitEPSS 0%

    wpbakery · page builderJun 22, 2023

  • CVE-2024-1805
    21Monitor

    WPBakery Visual Composer <= 7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button onclick attribute

    MediumCVSS 5.4No exploitEPSS 0%

    wpbakery · page builderMay 2, 2024

  • CVE-2024-1840
    21Monitor

    WPBakery Visual Composer <= 7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Author

    MediumCVSS 5.4No exploitEPSS 0%

    wpbakery · page builderMay 2, 2024

  • CVE-2024-1841
    21Monitor

    WPBakery Visual Composer <= 7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title tag attribute

    MediumCVSS 5.4No exploitEPSS 0%

    wpbakery · page builderMay 2, 2024

  • CVE-2024-1842
    21Monitor

    WPBakery Visual Composer <= 7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Heading tag attribute

    MediumCVSS 5.4No exploitEPSS 0%

    wpbakery · page builderMay 2, 2024

  • CVE-2025-4968
    21Monitor

    WPBakery Page Builder <= 8.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Page Builder Elements

    MediumCVSS 5.4No exploitEPSS 0%

    wpbakery · page builderJul 24, 2025

  • CVE-2024-5708
    21Monitor

    WPBakery <= 7.7 - Authenticated (Author+) Stored Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 0%

    wpbakery · wpbakery page builderAug 6, 2024

  • CVE-2024-43953
    21Monitor

    WordPress Classic Addons – WPBakery Page Builder plugin <= 3.5 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    wpbakery · page builderAug 29, 2024

  • CVE-2025-10006
    21Monitor

    WPBakery Page Builder <= 8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 0%

    wpbakery · page builderOct 18, 2025

  • CVE-2025-7502
    21Monitor

    WPBakery Page Builder for WordPress <= 8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 0%

    wpbakery · page builderAug 5, 2025

  • CVE-2025-11160
    21Monitor

    WPBakery Page Builder <= 8.6.1 - Stored Cross-Site Scripting via Custom JS Module

    MediumCVSS 5.4No exploitEPSS 0%

    wpbakery · page builderOct 15, 2025

  • CVE-2025-11161
    21Monitor

    WPBakery Page Builder <= 8.6.1 - Stored Cross-Site Scripting via vc_custom_heading Shortcode

    MediumCVSS 5.4No exploitEPSS 0%

    wpbakery · page builderOct 15, 2025

  • CVE-2025-4965
    21Monitor

    WPBakery Page Builder <= 8.4.1 - Authenticated (Author+) Stored Cross-Site Scripting via Grid Builder

    MediumCVSS 5.4No exploitEPSS 0%

    wpbakery · page builderJun 19, 2025