PT-2026-4429 · WordPress · Livemesh Wpbakery Page Builder Addons

Zadwon · Publicado 2026-01-23 · Atualizado 2026-01-24 · CVE-2026-24594

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Média

Vetor base

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Livemesh Addons for WPBakery Page Builder versions through 3.9.4

Description The software contains a flaw related to improper input handling during web page creation, which can lead to Stored Cross-site Scripting (XSS). This means that malicious scripts can be injected into web pages and executed by unsuspecting users. The affected component is Livemesh Addons for WPBakery Page Builder.

Recommendations Update Livemesh Addons for WPBakery Page Builder to a version later than 3.9.4.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2026-24594

Produtos afetados

Livemesh Wpbakery Page Builder Addons

Referências · 4

• https://patchstack.com/database/Wordpress/Plugin/addons-for-visual-composer/vulnerability/wordpress-livemesh-addons-for-wpbakery-page-builder-plugin-3-9-4-cross-site-scripting-xss-vulnerability?_s_id=cve · Nota
• https://twitter.com/VulmonFeeds/status/2014811901784404183 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2015086264140087442 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-24594 · Nota de Segurança