Cross-Site Scripting Vulnerability in Genetech Products Web and WooCommerce Addons for WPBakery Builder
CVE-2025-62748

6.5MEDIUM

Key Information:

Vendor

WordPress
Status
Web And WooCommerce Addons For WPbakery Builder
Vendor
CVE Published:
31 December 2025

What is CVE-2025-62748?

A security vulnerability has been identified in Genetech Products Web and WooCommerce Addons for WPBakery Builder. This issue arises from improper neutralization of input during web page generation, resulting in a DOM-Based XSS vulnerability. Attackers can exploit this flaw to execute arbitrary scripts in the context of users' browsers, leading to potential data theft, session hijacking, and other malicious activities. Users of versions from n/a through 1.5 should take immediate action to mitigate the risks associated with this vulnerability.

Affected Version(s)

Web and WooCommerce Addons for WPBakery Builder 0 <= 1.5

References

https://patchstack.com/database/Wordpress/Plugin/vc-addon...
vdb-entry

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Muhammad Yudha - DJ | Patchstack Bug Bounty Program
.