Log out
Get PRO

Latest

Input validation vulnerability in WPBakery Visual Composer 7.5

  • Severity: medium-risk
  • Status: Fixed
  • Publication: April 11, 2024

The plugin called wpbakery, used for WordPress websites, has a security issue. This vulnerability, known as Stored Cross-Site Scripting, allows attackers with contributor access or higher to inject harmful web scripts into pages. This can happen because the plugin does not properly clean or protect against this type of attack. This could potentially harm users who visit the affected pages.

Detected in:

WPBakery Page Builder fixed vulnerable versions:
WPBakery Page Builder for WordPress fixed vulnerable versions: >= * <= 7.5
WPBakery Visual Composer fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.