CVE-2026-119165 | WPBakery Page Builder Plugin up to 9.0.1 on WordPress display_name/nickname cross site scripting

November 7, 2026 Yanac

A vulnerability described as problematic has been identified in WPBakery Page Builder Plugin up to 9.0.1 on WordPress. Impacted is an unknown function. Such manipulation of the argument display_name/nickname leads to cross site scripting.

This vulnerability is documented as CVE-2026-119165. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More