Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-57780 EUVD-2026-43398GHSA-gvx7-jhmj-9gq9

WordPress Envision Page Builder plugin <= 0.22 - Cross Site Scripting (XSS) vulnerability

Published Jul 13, 2026 · Updated Jul 13, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Plugin Envision Envision Page Builder envision-page-builder allows DOM-Based XSS.This issue affects Envision Page Builder: from n/a through <= 0.22.

Affected products

VendorProductAffectedFixed
Plugin Envision Envision Page Builder ≤ 0.22 —

References