CVE-2026-57754
Received Received - Intake

Cross-Site Scripting (XSS) in Livemesh Addons for WPBakery Page Builder

Publication date: 2026-07-02

Last updated on: 2026-07-02

Assigner: Patchstack

Description
Contributor Cross Site Scripting (XSS) in Livemesh Addons for WPBakery Page Builder <= 3.9.4 versions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-02
Last Modified
2026-07-02
Generated
2026-07-02
AI Q&A
2026-07-02
EPSS Evaluated
N/A
NVD
CVE-2026-57754
EUVD
EUVD-2026-41310

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
livemesh addons_for_wpbakery_page_builder to 3.9.4 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-79 The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a Contributor Cross Site Scripting (XSS) issue found in Livemesh Addons for WPBakery Page Builder versions up to 3.9.4. It allows an attacker with contributor-level privileges to inject malicious scripts that can be executed in the context of other users.

Impact Analysis

The vulnerability can lead to unauthorized script execution, which may result in data theft, session hijacking, or unauthorized actions performed on behalf of other users. It affects confidentiality, integrity, and availability as indicated by its CVSS score.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-57754. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart