wpbakery kayıtları
wpbakery üreticisine ait 15 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %13,3
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')12
- CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)2
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
15 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2024-5709İstismar yok | WPBakery <= 7.7 - Authenticated (Author+) Local File Inclusionwpbakery · page builder · CWE-22 | Yüksek8,8 | — | %1,0 | 6 Ağu 2024 |
21İzleyin | CVE-2020-28650İstismar yok | The WPBakery plugin before 6.4.1 for WordPress allows XSS because it calls kses_remove_filters to disable the standard WordPress XSS protectwpbakery · page builder · CWE-79 | Orta5,4 | — | %0,7 | 16 Kas 2020 |
21İzleyin | CVE-2023-31213İstismar yok | WordPress WPBakery Page Builder Plugin < 6.13.0 is vulnerable to Cross Site Scripting (XSS)wpbakery · page builder · CWE-79 | Orta5,4 | — | %0,4 | 22 Haz 2023 |
21İzleyin | CVE-2024-1805İstismar yok | WPBakery Visual Composer <= 7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button onclick attributewpbakery · page builder · CWE-79 | Orta5,4 | — | %0,3 | 2 May 2024 |
21İzleyin | CVE-2024-1840İstismar yok | WPBakery Visual Composer <= 7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Authorwpbakery · page builder · CWE-79 | Orta5,4 | — | %0,3 | 2 May 2024 |
21İzleyin | CVE-2024-1841İstismar yok | WPBakery Visual Composer <= 7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title tag attributewpbakery · page builder · CWE-79 | Orta5,4 | — | %0,3 | 2 May 2024 |
21İzleyin | CVE-2024-1842İstismar yok | WPBakery Visual Composer <= 7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Heading tag attributewpbakery · page builder · CWE-79 | Orta5,4 | — | %0,3 | 2 May 2024 |
21İzleyin | CVE-2025-4968İstismar yok | WPBakery Page Builder <= 8.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Page Builder Elementswpbakery · page builder · CWE-79 | Orta5,4 | — | %0,3 | 24 Tem 2025 |
21İzleyin | CVE-2024-5708İstismar yok | WPBakery <= 7.7 - Authenticated (Author+) Stored Cross-Site Scriptingwpbakery · wpbakery page builder · CWE-79 | Orta5,4 | — | %0,3 | 6 Ağu 2024 |
21İzleyin | CVE-2024-43953İstismar yok | WordPress Classic Addons – WPBakery Page Builder plugin <= 3.5 - Cross Site Scripting (XSS) vulnerabilitywpbakery · page builder · CWE-79 | Orta5,4 | — | %0,3 | 29 Ağu 2024 |
21İzleyin | CVE-2025-10006İstismar yok | WPBakery Page Builder <= 8.6 - Authenticated (Contributor+) Stored Cross-Site Scriptingwpbakery · page builder · CWE-79 | Orta5,4 | — | %0,2 | 18 Eki 2025 |
21İzleyin | CVE-2025-7502İstismar yok | WPBakery Page Builder for WordPress <= 8.5 - Authenticated (Contributor+) Stored Cross-Site Scriptingwpbakery · page builder · CWE-79 | Orta5,4 | — | %0,2 | 5 Ağu 2025 |
21İzleyin | CVE-2025-11160İstismar yok | WPBakery Page Builder <= 8.6.1 - Stored Cross-Site Scripting via Custom JS Modulewpbakery · page builder · CWE-80 | Orta5,4 | — | %0,2 | 15 Eki 2025 |
21İzleyin | CVE-2025-11161İstismar yok | WPBakery Page Builder <= 8.6.1 - Stored Cross-Site Scripting via vc_custom_heading Shortcodewpbakery · page builder · CWE-80 | Orta5,4 | — | %0,2 | 15 Eki 2025 |
21İzleyin | CVE-2025-4965İstismar yok | WPBakery Page Builder <= 8.4.1 - Authenticated (Author+) Stored Cross-Site Scripting via Grid Builderwpbakery · page builder · CWE-79 | Orta5,4 | — | %0,2 | 19 Haz 2025 |
- CVE-2024-570935İzleyin
WPBakery <= 7.7 - Authenticated (Author+) Local File Inclusion
YüksekCVSS 8,8İstismar yokEPSS %1wpbakery · page builder6 Ağu 2024
- CVE-2020-2865021İzleyin
The WPBakery plugin before 6.4.1 for WordPress allows XSS because it calls kses_remove_filters to disable the standard WordPress XSS protect
OrtaCVSS 5,4İstismar yokEPSS %1wpbakery · page builder16 Kas 2020
- CVE-2023-3121321İzleyin
WordPress WPBakery Page Builder Plugin < 6.13.0 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 5,4İstismar yokEPSS %0wpbakery · page builder22 Haz 2023
- CVE-2024-180521İzleyin
WPBakery Visual Composer <= 7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button onclick attribute
OrtaCVSS 5,4İstismar yokEPSS %0wpbakery · page builder2 May 2024
- CVE-2024-184021İzleyin
WPBakery Visual Composer <= 7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Author
OrtaCVSS 5,4İstismar yokEPSS %0wpbakery · page builder2 May 2024
- CVE-2024-184121İzleyin
WPBakery Visual Composer <= 7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title tag attribute
OrtaCVSS 5,4İstismar yokEPSS %0wpbakery · page builder2 May 2024
- CVE-2024-184221İzleyin
WPBakery Visual Composer <= 7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Heading tag attribute
OrtaCVSS 5,4İstismar yokEPSS %0wpbakery · page builder2 May 2024
- CVE-2025-496821İzleyin
WPBakery Page Builder <= 8.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Page Builder Elements
OrtaCVSS 5,4İstismar yokEPSS %0wpbakery · page builder24 Tem 2025
- CVE-2024-570821İzleyin
WPBakery <= 7.7 - Authenticated (Author+) Stored Cross-Site Scripting
OrtaCVSS 5,4İstismar yokEPSS %0wpbakery · wpbakery page builder6 Ağu 2024
- CVE-2024-4395321İzleyin
WordPress Classic Addons – WPBakery Page Builder plugin <= 3.5 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0wpbakery · page builder29 Ağu 2024
- CVE-2025-1000621İzleyin
WPBakery Page Builder <= 8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
OrtaCVSS 5,4İstismar yokEPSS %0wpbakery · page builder18 Eki 2025
- CVE-2025-750221İzleyin
WPBakery Page Builder for WordPress <= 8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
OrtaCVSS 5,4İstismar yokEPSS %0wpbakery · page builder5 Ağu 2025
- CVE-2025-1116021İzleyin
WPBakery Page Builder <= 8.6.1 - Stored Cross-Site Scripting via Custom JS Module
OrtaCVSS 5,4İstismar yokEPSS %0wpbakery · page builder15 Eki 2025
- CVE-2025-1116121İzleyin
WPBakery Page Builder <= 8.6.1 - Stored Cross-Site Scripting via vc_custom_heading Shortcode
OrtaCVSS 5,4İstismar yokEPSS %0wpbakery · page builder15 Eki 2025
- CVE-2025-496521İzleyin
WPBakery Page Builder <= 8.4.1 - Authenticated (Author+) Stored Cross-Site Scripting via Grid Builder
OrtaCVSS 5,4İstismar yokEPSS %0wpbakery · page builder19 Haz 2025