| CVE-2025-69390 | WordPress Business Template Blocks for WPBakery (Visual Composer) Page Builder plugin <= 1.3.2 - Reflected Cross Site Scripting (XSS) vulnerability | themebon | Business Template Blocks for WPBakery (Visual Composer) Page Builder | - | - | 2026-02-20 15:46:55 | Deep Dive |
| CVE-2025-30631 | WordPress Amazon Affiliates Addon for WPBakery Page Builder (formerly Visual Composer) <= 1.2 - Cross Site Scripting (XSS) Vulnerability | AA-Team | Amazon Affiliates Addon for WPBakery Page Builder (formerly Visual Composer) | High | 7.1 | 2026-01-06 20:30:34 | Deep Dive |
| CVE-2025-30628 | WordPress Amazon Affiliates Addon for WPBakery Page Builder (formerly Visual Composer) plugin <= 1.2 - SQL Injection Vulnerability | AA-Team | Amazon Affiliates Addon for WPBakery Page Builder (formerly Visual Composer) | High | 8.5 | 2025-12-31 20:03:50 | Deep Dive |
| CVE-2025-68574 | WordPress WPBakery Visual Composer WHMCS Elements plugin <= 1.0.4.3 - Cross Site Scripting (XSS) vulnerability | voidcoders | WPBakery Visual Composer WHMCS Elements | Medium | 5.9 | 2025-12-24 13:10:38 | Deep Dive |
| CVE-2025-14119 | App Landing Template Blocks for WPBakery Page Builder <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes | themebon | App Landing Template Blocks for WPBakery (Visual Composer) Page Builder | Medium | 6.4 | 2025-12-12 03:20:46 | Deep Dive |
| CVE-2025-53299 | WordPress ThemeMakers Visual Content Composer Plugin <= 1.5.8 - PHP Object Injection Vulnerability | ThemeMakers | ThemeMakers Visual Content Composer | Critical | 9.8 | 2025-08-20 08:03:16 | Deep Dive |
| CVE-2025-55709 | WordPress Visual Composer Website Builder Plugin < 45.15.0 - Cross Site Scripting (XSS) Vulnerability | Visual Composer | Visual Composer Website Builder | Medium | 6.5 | 2025-08-14 18:21:31 | Deep Dive |
| CVE-2025-6572 | OpenStreetMap for Gutenberg and WPBakery Page Builder <= 1.2.0 - Contributor+ Stored XSS | Unknown | OpenStreetMap for Gutenberg and WPBakery Page Builder (formerly Visual Composer) | 中危 | - | 2025-08-08 06:00:04 | Deep Dive |
| CVE-2025-4968 | WPBakery Page Builder <= 8.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Page Builder Elements | wpbakery | WPBakery Page Builder | Medium | 6.4 | 2025-07-24 03:39:05 | Deep Dive |
| CVE-2025-42977 | Directory Traversal vulnerability in SAP NetWeaver Visual Composer | SAP_SE | SAP NetWeaver Visual Composer | High | 7.6 | 2025-06-10 00:10:44 | Deep Dive |
| CVE-2025-48276 | WordPress Visual Composer Website Builder plugin <= 45.11.0 - Cross Site Scripting (XSS) Vulnerability | Visual Composer | Visual Composer Website Builder | Medium | 6.5 | 2025-05-19 14:45:26 | Deep Dive |
| CVE-2025-42999 | Insecure Deserialization in SAP NetWeaver (Visual Composer development server) | SAP_SE | SAP NetWeaver (Visual Composer development server) | Critical | 9.1 | 2025-05-13 00:17:44 | Deep Dive |
| CVE-2025-47659 | WordPress WPBakery Visual Composer WHMCS Elements plugin <= 1.0.4.3 - Cross Site Scripting (XSS) vulnerability | voidcoders | WPBakery Visual Composer WHMCS Elements | Medium | 6.5 | 2025-05-07 14:20:47 | Deep Dive |
| CVE-2025-31324 | Missing Authorization check in SAP NetWeaver (Visual Composer development server) | SAP_SE | SAP NetWeaver (Visual Composer development server) | Critical | 10.0 | 2025-04-24 16:50:28 | Deep Dive |
| CVE-2025-46254 | WordPress Visual Composer Website Builder plugin <= 45.10.0 - Cross Site Scripting (XSS) vulnerability | Visual Composer | Visual Composer Website Builder | Medium | 6.5 | 2025-04-22 09:53:36 | Deep Dive |
| CVE-2025-2573 | Amazing service box Addons For WPBakery Page Builder <= 2.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload | zia420 | Amazing service box Addons For WPBakery Page Builder (formerly Visual Composer) | Medium | 6.4 | 2025-03-26 02:23:49 | Deep Dive |
| CVE-2024-13592 | Team Builder For WPBakery Page Builder(Formerly Visual Composer) <= 1.0 - Authenticated (Contributor+) Local File Inclusion | labibahmed42 | Team Builder For WPBakery Page Builder(Formerly Visual Composer) | High | 7.5 | 2025-02-19 07:32:15 | Deep Dive |
| CVE-2024-13591 | Team Builder For WPBakery Page Builder(Formerly Visual Composer) <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting | labibahmed42 | Team Builder For WPBakery Page Builder(Formerly Visual Composer) | Medium | 6.4 | 2025-02-19 07:32:14 | Deep Dive |
| CVE-2024-13582 | Simple Pricing Tables For WPBakery Page Builder(Formerly Visual Composer) <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting | labibahmed42 | Simple Pricing Tables For WPBakery Page Builder(Formerly Visual Composer) | Medium | 6.4 | 2025-02-18 04:21:21 | Deep Dive |
| CVE-2024-10175 | Pricing Tables For WPBakery Page Builder (formerly Visual Composer) <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via wdo_pricing_tables Shortcode | labibahmed42 | Pricing Tables For WPBakery Page Builder (formerly Visual Composer) | Medium | 6.4 | 2024-11-27 06:41:29 | Deep Dive |