Extension WordPress
Vulnérabilités WC Builder – WooCommerce Page Builder for WPBakery
Cette page rassemble les failles publiées pour WC Builder – WooCommerce Page Builder for WPBakery, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de WC Builder – WooCommerce Page Builder for WPBakery
3 fiches
WC Builder <= 1.2.0 – Authenticated (Contributor+) Stored Cross-Site Scripting
The WC Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.2.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and…
*-1.2.0
1.2.1
27/12/2025
WC Builder <= 1.2.0 – Authenticated (Shop Manager+) Stored Cross-Site Scripting via 'heading_color' Shortcode Attribute
The WC Builder – WooCommerce Page Builder for WPBakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'heading_color' parameter (and multiple other styling parameters) of the `wpbforwpbakery_product_additional_information` shortcode in all versions up to, and including,…
*-1.2.0
1.2.1
20/12/2025
WC Builder <= 1.0.18 – Authenticated (Contributor+) Stored Cross-Site Scripting
The WC Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.0.18 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and…
*-1.0.18
1.0.19
25/03/2024
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.