Topdigitaltrends Mega Addons For Wpbakery Page Builder — known CVE vulnerabilities

Every CVE whose affected-product data names Topdigitaltrends Mega Addons For Wpbakery Page Builder, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2022-4501 — CVSS 7.1 (high): The Mega Addons plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the vc_saving_data function…
• CVE-2022-36798 — CVSS 5.4 (medium): Cross-Site Request Forgery (CSRF) vulnerability in Topdigitaltrends Mega Addons For WPBakery Page Builder plugin <= 4.2.7 at WordPress.
• CVE-2023-0268 — CVSS 5.4 (medium): The Mega Addons For WPBakery Page Builder WordPress plugin before 4.3.0 does not validate and escape some of its shortcode attributes…