Filtered by vendor Livemeshthemes Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-2079 1 Livemeshthemes 1 Wpbakery Page Builder Addons 2025-07-07 6.4 Medium
The WPBakery Page Builder Addons by Livemesh plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'per_line_mobile' shortcode in all versions up to, and including, 3.8.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVE-2023-50370 1 Livemeshthemes 1 Wpbakery Page Builder Addons 2024-11-21 6.5 Medium
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Livemesh WPBakery Page Builder Addons by Livemesh allows Stored XSS.This issue affects WPBakery Page Builder Addons by Livemesh: from n/a through 3.5.