Vulnerabilidades em WPBakery

16 resultados
Análise Vexday

WPBakery apresenta footprint de risco mínimo com apenas 1 CVE catalogado, relacionado a Cross-Site Scripting (CWE-79), sem registro de exploração ativa em campo. A vulnerabilidade não atinge severidade crítica e não foi publicada recentemente, indicando exposição controlada e sem urgência operacional imediata.

CVE-2024-5709HIGHWPBakery <= 7.7 - Authenticated (Author+) Local File InclusionEPSS 1.0%CVE-2023-31213MEDIUMWordPress WPBakery Page Builder Plugin < 6.13.0 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2024-1841MEDIUMWPBakery Visual Composer <= 7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title tag attributeEPSS 0.3%CVE-2024-1842MEDIUMWPBakery Visual Composer <= 7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Heading tag attributeEPSS 0.3%CVE-2024-1840MEDIUMWPBakery Visual Composer <= 7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post AuthorEPSS 0.3%CVE-2024-1805MEDIUMWPBakery Visual Composer <= 7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button onclick attributeEPSS 0.3%CVE-2026-15101MEDIUMWPBakery Page Builder <= 8.7.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'data' ParameterEPSS 0.3%CVE-2024-5265MEDIUMWPBakery Page Builder <= 7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via VC Single Image link attributeEPSS 0.3%CVE-2025-4968MEDIUMWPBakery Page Builder <= 8.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Page Builder ElementsEPSS 0.3%CVE-2024-5708MEDIUMWPBakery <= 7.7 - Authenticated (Author+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2025-10006MEDIUMWPBakery Page Builder <= 8.6 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.2%CVE-2025-7502MEDIUMWPBakery Page Builder for WordPress <= 8.5 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.2%CVE-2025-11161MEDIUMWPBakery Page Builder <= 8.6.1 - Stored Cross-Site Scripting via vc_custom_heading ShortcodeEPSS 0.2%CVE-2025-11160MEDIUMWPBakery Page Builder <= 8.6.1 - Stored Cross-Site Scripting via Custom JS ModuleEPSS 0.2%CVE-2025-4965MEDIUMWPBakery Page Builder <= 8.4.1 - Authenticated (Author+) Stored Cross-Site Scripting via Grid BuilderEPSS 0.2%CVE-2025-54747MEDIUMWordPress Templatera Plugin <= 2.3.0 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%