PT-2025-32348
CVE-2025-6572
·
Published
2025-07-18
·
Updated
2025-08-08
Description by
CVSS 3.1
5.9
MediumMetricsAV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions
OpenStreetMap for Gutenberg and WPBakery Page Builder (formerly Visual Composer) versions through 1.2.0
Description
The plugin does not validate and escape certain block options before displaying them on a page or post, potentially allowing users with contributor roles and above to execute Stored Cross-Site Scripting attacks.
Recommendations
Update OpenStreetMap for Gutenberg and WPBakery Page Builder (formerly Visual Composer) to a version later than 1.2.0.
Found an issue in the description? Have something to add? Feel free to write us 👾