Plugin icon

WPBakery Page Builder Addons by Livemesh

addons-for-visual-composer
Plugin closed

Vulnerabilities:

9

Last Updated:

November 15, 2025

Active Installs:

20000

Published
Title
Fixed in
CVSS
Published
2026-05-26
Title
WPBakery Page Builder Addons by Livemesh <= 3.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Fixed in
No known fix
CVSS
5.5 (medium)
Published
2026-05-26
Title
WPBakery Page Builder Addons by Livemesh <= 3.9.4 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
Fixed in
No known fix
CVSS
6.4 (medium)
Published
2026-01-15
Title
Livemesh Addons for WPBakery Page Builder <= 3.9.4 - Authenticated (Editor+) Stored Cross-Site Scripting
Fixed in
No known fix
CVSS
4.4 (medium)
Published
2024-08-16
Title
Livemesh Addons for WPBakery Page Builder < 3.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 3.9.1
CVSS
6.4 (medium)
Published
2024-03-25
Title
Livemesh Addons for WPBakery Page Builder < 3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Fixed in
Fixed in 3.8
CVSS
6.4 (medium)
Published
2024-03-13
Title
WPBakery Page Builder Addons by Livemesh < 3.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Fixed in
Fixed in 3.8.3
CVSS
6.4 (medium)
Published
2023-12-07
Title
Livemesh Addons for WPBakery Page Builder < 3.6 - Contributor+ Stored XSS
Fixed in
Fixed in 3.6
CVSS
5.9 (medium)
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 3.3
CVSS
6.1 (medium)
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Fixed in
Fixed in 2.9.2
CVSS
4.3 (medium)