| CVE/PSC | Application | Date | Affected versions | Description |
|---|---|---|---|---|
| Actual on: Jun 10, 2025, 03:06:46 | Entries count: 9 | |||
|
WPBakery Page Builder Addons by Livemesh
vulnerable
|
Jun 07, 2024, 01:06:32 |
Min -
Max 3.8
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Livemesh Livemesh Addons for WPBakery Page Builder allows Stored XSS.This issue affects Livemesh Addons for WPBakery Page Builder: from n/a through 3.7. | |
|
WPBakery Page Builder Addons by Livemesh
vulnerable
|
Jun 07, 2024, 01:06:32 |
Min -
Max 3.3
|
WPBakery Page Builder Addons by Livemesh [addons-for-visual-composer] < 3.3 (closed) WordPress Livemesh Addons for WPBakery Page Builder plugin <= 2.9.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability discovered in WordPress Livemesh Addons for WPBakery Page Builder plugin (versions <= 2.9.1). | |
|
WPBakery Page Builder Addons by Livemesh
vulnerable
|
Jun 07, 2024, 01:06:32 |
Min -
Max 3.6
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Livemesh WPBakery Page Builder Addons by Livemesh allows Stored XSS.This issue affects WPBakery Page Builder Addons by Livemesh: from n/a through 3.5. | |
|
WPBakery Page Builder Addons by Livemesh
vulnerable
|
Jun 07, 2024, 01:06:32 |
Min -
Max 3.8.3
|
The WPBakery Page Builder Addons by Livemesh plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'per_line_mobile' shortcode in all versions up to, and including, 3.8.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. | |
|
WPBakery Page Builder Addons by Livemesh
vulnerable
|
Aug 20, 2024, 05:08:54 |
Min -
Max 3.9.1
|
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Livemesh Livemesh Addons for WPBakery Page Builder addons-for-visual-composer allows Stored XSS.This issue affects Livemesh Addons for WPBakery Page Builder: from n/a through 3.9. | |
|
WPBakery Page Builder Addons by Livemesh
vulnerable
|
Nov 15, 2024, 12:11:00 |
Min -
Max 2.9.2
|
The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_debug_log, _get_db_option, and the _set_db_option functions in versions up to, and including 2.4.2. Any WordPress plugin or theme running a version of Freemius less than 2.4.3 is vulnerable. | |
|
Mega Addons For WPBakery Page Builder
vulnerable
|
Jun 07, 2024, 08:06:04 |
Min -
Max 4.3.0
|
The Mega Addons plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the vc_saving_data function in versions up to, and including, 4.2.7. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to update the plugin's settings. | |
|
Mega Addons For WPBakery Page Builder
vulnerable
|
Jun 07, 2024, 08:06:04 |
Min -
Max 4.3.0
|
The Mega Addons For WPBakery Page Builder WordPress plugin before 4.3.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. | |
|
Mega Addons For WPBakery Page Builder
vulnerable
|
Jun 07, 2024, 08:06:04 |
Min -
Max 4.3.0
|
Cross-Site Request Forgery (CSRF) vulnerability in Topdigitaltrends Mega Addons For WPBakery Page Builder plugin <= 4.2.7 at WordPress. | |