visualcomposer vulnerabilities
5 published CVEs name visualcomposer among the affected products.
- 5Published CVEs5 of them scored
- 1Last 12 monthspublished in the last year
- 1Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-12227
Visual Composer Website Builder <= 45.16.0 - Unauthenticated Local File Inclusion via 'vcv-template' Parameter
visualcomposer · Visual Composer Website Builder
Critical9.8 - CVE-2023-6880
Visual Composer Premium <= 45.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
visualcomposer · Visual Composer Website Builder
Medium6.4 - CVE-2020-36722
Visual Composer <= 26.0 - Multiple Cross-Site Scripting
visualcomposer · Visual Composer Website Builder
Medium5.5 - CVE-2022-2516
Visual Composer Website Builder <= 45.0 - Authenticated Stored Cross-Site Scripting via 'Title'
visualcomposer · Visual Composer Website Builder, Landing Page Builder, Custom Theme Builder, Maintenance Mode & Coming Soon Pages
Medium6.4 - CVE-2022-2430
Visual Composer Website Builder <= 45.0 - Authenticated Stored Cross-Site Scripting via 'Text Block'
visualcomposer · Visual Composer Website Builder, Landing Page Builder, Custom Theme Builder, Maintenance Mode & Coming Soon Pages
Medium6.4