Cross-site Scripting Vulnerability in Universal Video Player Addon for WPBakery Page Builder

CVE-2025-53559

What is CVE-2025-53559?

A Cross-site Scripting (XSS) vulnerability exists in the Universal Video Player Addon for WPBakery Page Builder, allowing attackers to inject malicious scripts into web pages. This vulnerability can be exploited by sending crafted requests, which could result in the execution of arbitrary scripts in the user's browser. The impact is particularly concerning as it could lead to unauthorized access to user sessions, data exfiltration, or further exploitation of the web application.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References