Showing 2 vulnerabilities on this page for Amazon Affiliates Addon for WPBakery Page Builder (formerly Visual Composer)

Signals CISA KEV Ransomware Nuclei
AA-Team vulnerability results
VulnerabilityTitle and contextCVSSEPSSPoCsSignalsSTIX action

Reflected Cross Site Scripting (XSS) vulnerability in AA-Team WordPress plugins

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AA-Team Woocommerce Sales Funnel Builder, AA-Team Amazon Affiliates Addon for WPBakery Page Builder (formerly Visual Composer) allows Reflected XSS.This issue affects Woocommerce Sales Funnel Builder: from n/a through 1.1; Amazon Affiliates Addon for WPBakery Page Builder (formerly Visual Composer): from n/a through 1.2.

CWE-79Jan 6, 2026
CVSS7.1v3.1EPSS0.153%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

WordPress Amazon Affiliates Addon for WPBakery Page Builder (formerly Visual Composer) plugin <= 1.2 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AA-Team Amazon Affiliates Addon for WPBakery Page Builder (formerly Visual Composer) allows SQL Injection.This issue affects Amazon Affiliates Addon for WPBakery Page Builder (formerly Visual Composer): from n/a through 1.2.

CWE-89Dec 31, 2025
CVSS8.5v3.1EPSS0.219%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX