livecomposer vulnerabilities
8 published CVEs name livecomposer among the affected products.
- 8Published CVEs8 of them scored
- 8Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-16778
Live Composer <= 2.1.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'dslc_module_downloads_output' Shortcode Content
livecomposer · Live Composer – Free WordPress Website Builder
Medium6.4 - CVE-2026-16502
Live Composer <= 2.1.18 - Authenticated (Contributor+) PHP Object Injection via Shortcode
livecomposer · Live Composer – Free WordPress Website Builder
High8.8 - CVE-2026-16788
Live Composer <= 2.1.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via dslc_module_projects_output Shortcode
livecomposer · Live Composer – Free WordPress Website Builder
Medium6.4 - CVE-2026-16786
Live Composer <= 2.1.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via dslc_module_testimonials_output Shortcode
livecomposer · Live Composer – Free WordPress Website Builder
Medium6.4 - CVE-2026-13203
Live Composer <= 2.1.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'custom_id' Shortcode Attribute
livecomposer · Live Composer – Free WordPress Website Builder
Medium6.4 - CVE-2026-16787
Live Composer <= 2.1.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'dslc_custom_field' Shortcode
livecomposer · Live Composer – Free WordPress Website Builder
Medium6.4 - CVE-2025-14071
Live Composer – Free WordPress Website Builder <= 2.0.2 - Authenticated (Contributor+) PHP Object Injection via dslc_module_posts_output Shortcode
livecomposer · Live Composer – Free WordPress Website Builder
High7.5 - CVE-2025-13537
Live Composer – Free WordPress Website Builder <= 2.0.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
livecomposer · Live Composer – Free WordPress Website Builder
Medium6.4