| CVE-2026-34889 | WordPress Ultimate Addons for WPBakery Page Builder plugin < 3.21.4 - Cross Site Scripting (XSS) vulnerability | Brainstorm Force | Ultimate Addons for WPBakery Page Builder | Medium | 6.5 | 2026-04-01 08:51:32 | Deep Dive |
| CVE-2026-28038 | WordPress Ultimate Addons for WPBakery Page Builder plugin <= 3.21.1 - Broken Access Control vulnerability | Brainstorm_Force | Ultimate Addons for WPBakery Page Builder | Medium | 6.5 | 2026-03-05 05:54:15 | Deep Dive |
| CVE-2025-69390 | WordPress Business Template Blocks for WPBakery (Visual Composer) Page Builder plugin <= 1.3.2 - Reflected Cross Site Scripting (XSS) vulnerability | themebon | Business Template Blocks for WPBakery (Visual Composer) Page Builder | - | - | 2026-02-20 15:46:55 | Deep Dive |
| CVE-2025-68531 | WordPress ModelTheme Addons for WPBakery and Elementor plugin < 1.5.6 - PHP Object Injection vulnerability | modeltheme | ModelTheme Addons for WPBakery and Elementor | - | - | 2026-02-20 15:46:39 | Deep Dive |
| CVE-2025-60087 | WordPress Extensive VC Addons for WPBakery page builder plugin <= 1.9.1 - Local File Inclusion vulnerability | Nenad Obradovic | Extensive VC Addons for WPBakery page builder | - | - | 2026-02-20 15:46:28 | Deep Dive |
| CVE-2026-24594 | WordPress Livemesh Addons for WPBakery Page Builder plugin <= 3.9.4 - Cross Site Scripting (XSS) vulnerability | livemesh | Livemesh Addons for WPBakery Page Builder | Medium | 5.9 | 2026-01-23 14:29:02 | Deep Dive |
| CVE-2025-30631 | WordPress Amazon Affiliates Addon for WPBakery Page Builder (formerly Visual Composer) <= 1.2 - Cross Site Scripting (XSS) Vulnerability | AA-Team | Amazon Affiliates Addon for WPBakery Page Builder (formerly Visual Composer) | High | 7.1 | 2026-01-06 20:30:34 | Deep Dive |
| CVE-2025-69360 | WordPress TheGem Theme Elements (for WPBakery) plugin <= 5.11.0 - Cross Site Scripting (XSS) vulnerability | CodexThemes | TheGem Theme Elements (for WPBakery) | 中危 | - | 2026-01-06 16:36:42 | Deep Dive |
| CVE-2025-30628 | WordPress Amazon Affiliates Addon for WPBakery Page Builder (formerly Visual Composer) plugin <= 1.2 - SQL Injection Vulnerability | AA-Team | Amazon Affiliates Addon for WPBakery Page Builder (formerly Visual Composer) | High | 8.5 | 2025-12-31 20:03:50 | Deep Dive |
| CVE-2025-66145 | WordPress Worker for WPBakery plugin <= 1.1.1 - Broken Access Control vulnerability | merkulove | Worker for WPBakery | Medium | 5.4 | 2025-12-31 19:51:23 | Deep Dive |
| CVE-2025-62748 | WordPress Web and WooCommerce Addons for WPBakery Builder plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability | Genetech Products | Web and WooCommerce Addons for WPBakery Builder | Medium | 6.5 | 2025-12-31 12:02:49 | Deep Dive |
| CVE-2023-32238 | WordPress TheGem theme < 5.8.1.1 - Broken Access Control vulnerability | CodexThemes | TheGem (Elementor) | Medium | 5.4 | 2025-12-29 23:18:55 | Deep Dive |
| CVE-2025-68574 | WordPress WPBakery Visual Composer WHMCS Elements plugin <= 1.0.4.3 - Cross Site Scripting (XSS) vulnerability | voidcoders | WPBakery Visual Composer WHMCS Elements | Medium | 5.9 | 2025-12-24 13:10:38 | Deep Dive |
| CVE-2025-68532 | WordPress ModelTheme Addons for WPBakery and Elementor plugin < 1.5.6 - Cross Site Scripting (XSS) vulnerability | modeltheme | ModelTheme Addons for WPBakery and Elementor | Medium | 6.5 | 2025-12-24 12:31:26 | Deep Dive |
| CVE-2025-14054 | WC Builder <= 1.2.0 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via 'heading_color' Shortcode Attribute | hasthemes | WC Builder – WooCommerce Page Builder for WPBakery | Medium | 4.4 | 2025-12-21 02:20:32 | Deep Dive |
| CVE-2025-66165 | WordPress Lottier for WPBakery plugin <= 1.1.7 - Broken Access Control vulnerability | merkulove | Lottier for WPBakery | - | - | 2025-12-16 08:12:56 | Deep Dive |
| CVE-2025-14475 | Extensive VC Addons for WPBakery page builder <= 1.9.1 - Unauthenticated Local File Inclusion via 'shortcode_name' Parameter | nenad-obradovic | Extensive VC Addons for WPBakery page builder | High | 8.1 | 2025-12-13 04:31:25 | Deep Dive |
| CVE-2025-14119 | App Landing Template Blocks for WPBakery Page Builder <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes | themebon | App Landing Template Blocks for WPBakery (Visual Composer) Page Builder | Medium | 6.4 | 2025-12-12 03:20:46 | Deep Dive |
| CVE-2025-62046 | WordPress TheGem Demo Import (for WPBakery) plugin <= 5.10.5 - Arbitrary Content Deletion vulnerability | CodexThemes | TheGem Demo Import (for WPBakery) | Medium | 6.5 | 2025-11-06 15:55:43 | Deep Dive |
| CVE-2025-62045 | WordPress TheGem Theme Elements (for WPBakery) plugin <= 5.10.5.1 - Local File Inclusion vulnerability | CodexThemes | TheGem Theme Elements (for WPBakery) | High | 8.1 | 2025-11-06 15:55:42 | Deep Dive |