wpbakery vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20247
3. 20257
4. 20261

Newest CVEs

• CVE-2026-15101

  WPBakery Page Builder <= 8.7.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'data' Parameter

  wpbakery · WPBakery Page Builder

  Medium6.4
• CVE-2025-10006

  WPBakery Page Builder <= 8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

  wpbakery · WPBakery Page Builder

  Medium6.4
• CVE-2025-11160

  WPBakery Page Builder <= 8.6.1 - Stored Cross-Site Scripting via Custom JS Module

  wpbakery · WPBakery Page Builder

  Medium6.4
• CVE-2025-11161

  WPBakery Page Builder <= 8.6.1 - Stored Cross-Site Scripting via vc_custom_heading Shortcode

  wpbakery · WPBakery Page Builder

  Medium6.4
• CVE-2025-54747

  WordPress Templatera Plugin <= 2.3.0 - Cross Site Scripting (XSS) Vulnerability

  wpbakery · Templatera

  Medium6.5
• CVE-2025-7502

  WPBakery Page Builder for WordPress <= 8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

  wpbakery · WPBakery Page Builder

  Medium6.4
• CVE-2025-4968

  WPBakery Page Builder <= 8.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Page Builder Elements

  wpbakery · WPBakery Page Builder

  Medium6.4
• CVE-2025-4965

  WPBakery Page Builder <= 8.4.1 - Authenticated (Author+) Stored Cross-Site Scripting via Grid Builder

  wpbakery · WPBakery Page Builder

  Medium6.4
• CVE-2024-5709

  WPBakery <= 7.7 - Authenticated (Author+) Local File Inclusion

  wpbakery · WPBakery Page Builder

  High8.8
• CVE-2024-5708

  WPBakery <= 7.7 - Authenticated (Author+) Stored Cross-Site Scripting

  wpbakery · WPBakery Page Builder

  Medium6.4