Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2020-28650

The WPBakery plugin before 6.4.1 for WordPress allows XSS because it calls kses_remove_filters to disable the standard WordPress XSS protection mechanism for the Author and Contributor roles.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 36.9%
CVSS Severity
CVSS v3 Score 6.4
CVSS v2 Score 3.5
Products affected by CVE-2020-28650


Contact Us

Shodan ® - All rights reserved