If you or your clients use Kaswara Modern WPBakery Page Builder (10k+ installations), then you might want to uninstall it when you can. Wordfence is reporting a critical zero-day vulnerability.
And if you use Elementor, make sure it's updated. A vulnerability was discovered last month, and more recently some third-party Elementor plugins received security patches too. Collectively these vulnerabilities affect millions of websites. 🔒