Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Wpbakery Page Builder Clipboard Project Component: Wpbakery Page Builder Clipboard Clear all filters
TI-2024-04889 CVE-2024-5265 · GHSA-8vh3-g442-48j7

Cross-site scripting in WPBakery Page Builder

Priority LOW 28

The WPBakery Visual Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the link attribute within the vc_single_image shortcode in all versions up to, and including, 7.6 due to insufficient inp…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00305 Published 2024-06-13 No fix listed CWE-79
TI-2021-06536 CVE-2021-24244 · GHSA-x46v-m262-7xx6

WPBakery Page Builder Clipboard < 4.5.8 - Unauthorised Arbitrary License Options Update

Priority LOW 31

An AJAX action registered by the WPBakery Page Builder (Visual Composer) Clipboard WordPress plugin before 4.5.8 did not have capability checks, allowing low privilege users, such as subscribers, to update the license op…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00938 Published 2021-05-05 Fixed in 4.5.8 CWE-863
TI-2021-06535 CVE-2021-24243 · GHSA-q5g9-jf88-x4g8

WPBakery Page Builder Clipboard < 4.5.6 - Subscriber+ Stored Cross-Site Scripting (XSS)

Priority LOW 26

An AJAX action registered by the WPBakery Page Builder (Visual Composer) Clipboard WordPress plugin before 4.5.6 did not have capability checks nor sanitization, allowing low privilege users (subscriber+) to call it and…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00703 Published 2021-05-05 Fixed in 4.5.6 CWE-79