WPBakery Page Builder Addons by Livemesh

WPBakery Page Builder Addons by Livemesh has 10 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2026; 6 are fixed and 4 remain unpatched as of September 2026. Their average CVSS score is 6.2, and the most serious one scores 6.4 out of 10. 2026 was the busiest year with 4 disclosures.

The most common weakness is Cross-Site Scripting, behind 8 of the records (80%). Other recurring categories include Missing Authorization.

6 of the records (60%) have a vendor fix, while 4 remain unpatched. The oldest unresolved one dates back to 2026.

7 independent researchers contributed these findings, most of them (2) reported by Abu Hurayra (HurayraIIT).

Strategic Overview

Avg CVSSMedium

6.2/ 10

Patch Coverage60%

Open

Fixed

Get automatic notifications for all WPBakery Page Builder Addons by Livemesh vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2026-57754

WPBakery Page Builder Addons by Livemesh <= 3.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

10 records


2026-07-02 00:00	WPBakery Page Builder Addons by Livemesh <= 3.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting WPBakery Page Builder Addons by Livemesh <= 3.9.4	`CVE-2026-57754`	6.4 Medium	timomangcut	No
2026-05-26 17:34	WPBakery Page Builder Addons by Livemesh <= 3.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes WPBakery Page Builder Addons by Livemesh <= 3.9.4	`CVE-2026-2030`	6.4 Medium	Muhammad Yudha - DJ	No
2026-05-26 17:33	WPBakery Page Builder Addons by Livemesh <= 3.9.4 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting WPBakery Page Builder Addons by Livemesh <= 3.9.4	`CVE-2026-3895`	6.4 Medium	Muhammad Yudha - DJ	No
2026-01-15 00:00	Livemesh Addons for WPBakery Page Builder <= 3.9.4 - Authenticated (Editor+) Stored Cross-Site Scripting WPBakery Page Builder Addons by Livemesh <= 3.9.4	`CVE-2026-24594`	4.4 Medium	ZadWon	No
2024-08-16 00:00	Livemesh Addons for WPBakery Page Builder <= 3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting WPBakery Page Builder Addons by Livemesh <= 3.9	`CVE-2024-43320`	6.4 Medium	LVT-tholv2k	Yes
2024-03-25 00:00	Livemesh Addons for WPBakery Page Builder <= 3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode WPBakery Page Builder Addons by Livemesh <= 3.7	`CVE-2024-30183`	6.4 Medium	Abu Hurayra (HurayraIIT)	Yes
2024-03-13 00:00	WPBakery Page Builder Addons by Livemesh <= 3.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode WPBakery Page Builder Addons by Livemesh <= 3.8.1	`CVE-2024-2079`	6.4 Medium	Krzysztof Zając	Yes
2023-12-07 00:00	Livemesh Addons for WPBakery Page Builder <= 3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting WPBakery Page Builder Addons by Livemesh <= 3.5	`CVE-2023-50370`	6.4 Medium	Abu Hurayra (HurayraIIT)	Yes
2023-07-18 00:00	Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get WPBakery Page Builder Addons by Livemesh 2.2.1 – 3.2	`CVE-2023-33999`	6.1 Medium	Rafie Muhammad	Yes
2022-03-04 00:00	Freemius SDK <= 2.4.2 - Missing Authorization Checks WPBakery Page Builder Addons by Livemesh < 2.9.2	`CVE-2022-4974`	6.3 Medium	Anonymous	Yes

Showing 1–10 of 10 reports