Researchers discovered a vulnerability in WP Bakery page builder that allows an attacker to inject malicious JavaScript into pages and posts. The vulnerability allows an attacker to inject code into pages and posts that then attacks site visitor browsers.
https://www.searchenginejournal.com/wp-bakery-wordpress-vulnerability/383383/
https://www.searchenginejournal.com/wp-bakery-wordpress-vulnerability/383383/