WPBakery Page Builder Template Block Vulnerability

The App Landing Template Blocks for WPBakery (Visual Composer) Page Builder plugin is a WordPress extension used to create custom page templates. The vulnerability allows authenticated attackers with contributor-level access and above to inject arbitrary web scripts in pages, which can execute when accessed.

Specific version info not stated in the advisory.

Upgrade to WPBakery Page Builder version 2.0.3 or later: https://wordpress.org/plugins/wp-bakery-page-builder/
- Immediate mitigations:
- Restrict contributor-level access (if applicable)
- Monitor for suspicious template modifications

• plugins.trac.wordpress.org
• plugins.trac.wordpress.org
• www.wordfence.com