PT-2025-32348 · WordPress · Wpbakery Page Builder+1

Krugov Artyom · Published 2025-08-08 · Updated 2025-08-08 · CVE-2025-6572

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions OpenStreetMap for Gutenberg and WPBakery Page Builder (formerly Visual Composer) versions through 1.2.0

Description The plugin does not validate and escape certain block options before displaying them on a page or post, potentially allowing users with contributor roles and above to execute Stored Cross-Site Scripting attacks.

Recommendations Update OpenStreetMap for Gutenberg and WPBakery Page Builder (formerly Visual Composer) to a version later than 1.2.0.

Exploit

Fix

Related Identifiers

CVE-2025-6572

Affected Products

Openstreetmap For Gutenberg

Wpbakery Page Builder

References · 5

• 🔥 https://wpscan.com/vulnerability/58c7a8ac-1acd-45b7-abe5-5635fbb5d4c1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-6572 · Security Note
• https://t.me/CVEtracker/29498 · Telegram Post
• https://t.me/cveNotify/131381 · Telegram Post
• https://twitter.com/CVEnew/status/1953704274472436187 · Twitter Post