Visual Composer vulnerabilities

Products

• Website Builder 12

Newest

• visual composer website builder WordPress Visual Composer Website Builder plugin <= 45.16.3 - Broken Access Control vulnerability CVE-2026-106596 5.3 MediumOctober 8, 2026
• visual composer website builder WordPress Visual Composer Website Builder plugin <= 45.16.2 - Cross Site Scripting (XSS) vulnerability CVE-2026-97262 6.5 MediumSeptember 30, 2026
• visual composer website builder, visualcomposer visual composer website builder +1 more Visual Composer Website Builder <= 45.16.0 - Unauthenticated Local File Inclusion via 'vcv-template' Parameter CVE-2026-12227 Public exploit 9.8 CriticalSeptember 24, 2026
• visual composer website builder WordPress Visual Composer Website Builder plugin <= 45.16.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-62138 6.5 MediumSeptember 11, 2026
• visual composer website builder WordPress Visual Composer Website Builder plugin <= 45.15.0 - Broken Access Control vulnerability CVE-2026-65568 5.0 MediumJuly 27, 2026
• visual composer website builder WordPress Visual Composer Website Builder Plugin < 45.15.0 - Cross Site Scripting (XSS) Vulnerability CVE-2025-55709 6.5 MediumAugust 14, 2025
• visual composer website builder WordPress Visual Composer Website Builder plugin <= 45.11.0 - Cross Site Scripting (XSS) Vulnerability CVE-2025-48276 6.5 MediumMay 19, 2025
• visual composer website builder, visualcomposer visual composer website builder +1 more WordPress Visual Composer Website Builder plugin <= 45.10.0 - Cross Site Scripting (XSS) vulnerability CVE-2025-46254 6.5 MediumApril 22, 2025
• visual composer starter WordPress Visual Composer Starter theme <= 3.3 - Cross Site Scripting (XSS) vulnerability CVE-2024-43263 6.5 MediumAugust 18, 2024
• visual composer website builder, visualcomposer visual composer website builder +1 more WordPress Visual Composer Website Builder, Landing Page Builder, Custom Theme Builder, Maintenance Mode & Coming Soon Pages plugin <= 45.8.0 - Cross Site Scripting (XSS) vulnerability CVE-2024-35653 6.5 MediumJune 4, 2024
• visual composer website builder WordPress Visual Composer plugin <= 45.6.0 - Cross Site Scripting (XSS) vulnerability CVE-2024-27997 5.9 MediumMarch 19, 2024
• visual composer website builder, visualcomposer visual composer website builder +1 more Visual Composer Premium <= 45.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2023-6880 6.4 MediumMarch 13, 2024
• visual composer website builder, visualcomposer visual composer website builder +1 more Visual Composer <= 26.0 - Multiple Cross-Site Scripting CVE-2020-36722 5.5 MediumJune 7, 2023