WordPress security by component

Classic Addons – WPBakery Page Builder

Plugin description

Classic Addons – WPBakery Page Builder is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Jan 07, 2025; the highest CVE/CNA score is 7.5.

Plugin slug: classic-addons-wpbakery-page-builder-addons

Latest vulnerability

CVE-2024-56286: Classic Addons – WPBakery Page Builder: Filesystem traversal

Classic Addons – WPBakery Page Builder is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.

PublishedJan 07, 2025

Safe version guidanceSee mitigation notes

		Safe version
Jan 07, 2025	CVE-2024-56286 Classic Addons – WPBakery Page Builder: Filesystem traversal Classic Addons – WPBakery Page Builder is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.	See mitigation notes	CVE7.5 NVDPending
Dec 04, 2024	CVE-2024-11952 Classic Addons – WPBakery Page Builder: A security weakness Classic Addons – WPBakery Page Builder is affected by a security weakness. Exploitation requires at least contributor-level access. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE7.5 NVDPending