← WordPress Vulnerabilities
WordPress security by component

WPBakery Visual Composer

WPBakery Visual Composer is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Aug 06, 2024; the highest CVE/CNA score is 6.4.

Plugin slug: wpbakery-page-builder

CVE-2024-5708: WPBakery Visual Composer: Cross-site scripting

WPBakery Visual Composer is affected by cross-site scripting. Exploitation requires at least author-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.

PublishedAug 06, 2024
Safe version guidanceSee mitigation notes
Safe version
Aug 06, 2024 CVE-2024-5708
WPBakery Visual Composer: Cross-site scripting
WPBakery Visual Composer is affected by cross-site scripting. Exploitation requires at least author-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE6.4
NVD5.4