Livecomposer vulnerabilities

Products

• Page Builder: Live Composer 9
• Live Composer – Free Wordpress Website Builder 8

Newest

• livecomposer live composer – free wordpress website builder Live Composer <= 2.1.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'dslc_module_downloads_output' Shortcode Content CVE-2026-16778 6.4 MediumSeptember 22, 2026
• livecomposer live composer – free wordpress website builder Live Composer <= 2.1.18 - Authenticated (Contributor+) PHP Object Injection via Shortcode CVE-2026-16502 8.8 HighSeptember 8, 2026
• livecomposer live composer – free wordpress website builder Live Composer <= 2.1.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via dslc_module_projects_output Shortcode CVE-2026-16788 6.4 MediumSeptember 1, 2026
• livecomposer live composer – free wordpress website builder Live Composer <= 2.1.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via dslc_module_testimonials_output Shortcode CVE-2026-16786 6.4 MediumSeptember 1, 2026
• livecomposer live composer – free wordpress website builder Live Composer <= 2.1.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'dslc_custom_field' Shortcode CVE-2026-16787 6.4 MediumSeptember 1, 2026
• livecomposer live composer – free wordpress website builder Live Composer <= 2.1.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'custom_id' Shortcode Attribute CVE-2026-13203 6.4 MediumSeptember 1, 2026
• live composer team page builder: live composer WordPress Page Builder: Live Composer plugin <= 2.1.22 - Cross Site Scripting (XSS) vulnerability CVE-2025-68598 6.5 MediumDecember 24, 2025
• livecomposer live composer – free wordpress website builder Live Composer – Free WordPress Website Builder <= 2.0.2 - Authenticated (Contributor+) PHP Object Injection via dslc_module_posts_output Shortcode CVE-2025-14071 7.5 HighDecember 21, 2025
• livecomposer live composer – free wordpress website builder Live Composer – Free WordPress Website Builder <= 2.0.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting CVE-2025-13537 6.4 MediumDecember 17, 2025
• live composer team page builder: live composer, blueastral page builder\ +1 more WordPress Page Builder: Live Composer plugin <= 2.1.22 - Cross Site Scripting (XSS) vulnerability CVE-2024-35768 5.9 MediumJune 21, 2024
• live composer team page builder: live composer, blueastral page builder\ +1 more WordPress Page Builder: Live Composer plugin <= 1.5.42 - Contributor+ Shortcode Cross Site Scripting (XSS) vulnerability CVE-2024-35779 6.5 MediumJune 21, 2024
• live composer team page builder: live composer, page builder live composer +1 more WordPress Page Builder: Live Composer plugin <= 1.5.42 - Contributor+ PHP Object Injection vulnerability CVE-2024-35780 8.5 HighJune 19, 2024
• live composer team page builder: live composer WordPress Page Builder: Live Composer plugin <= 1.5.38 - Broken Access Control vulnerability CVE-2024-32957 4.7 MediumApril 26, 2024
• live composer team page builder: live composer WordPress Page Builder: Live Composer plugin <= 1.5.35 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-31933 5.4 MediumApril 15, 2024
• live composer team page builder: live composer, blueastral page builder\ +1 more WordPress Page Builder: Live Composer Plugin <= 1.5.23 is vulnerable to Cross Site Scripting (XSS) CVE-2023-52193 6.5 MediumFebruary 1, 2024
• live composer team page builder: live composer, blueastral page builder\ +1 more WordPress Page Builder: Live Composer Plugin <= 1.5.25 is vulnerable to PHP Object Injection CVE-2023-52206 7.7 HighJanuary 8, 2024
• livecomposer page builder: live composer, blueastral page builder\ +1 more Page Builder: Live Composer < 1.5.23 - Contributor+ Stored XSS via Shortcode CVE-2022-4669 5.4 MediumFebruary 21, 2023