Skip to contentVisual Composer Website Builder vulnerabilities
- visual composer website builderWordPress Visual Composer Website Builder plugin <= 45.16.3 - Broken Access Control vulnerabilityCVE-2026-1065965.3 Medium
- visual composer website builderWordPress Visual Composer Website Builder plugin <= 45.16.2 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-972626.5 Medium
- visual composer website builder, visualcomposer visual composer website builder +1 moreVisual Composer Website Builder <= 45.16.0 - Unauthenticated Local File Inclusion via 'vcv-template' ParameterCVE-2026-12227Public exploit9.8 Critical
- visual composer website builderWordPress Visual Composer Website Builder plugin <= 45.16.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-621386.5 Medium
- visual composer website builderWordPress Visual Composer Website Builder plugin <= 45.15.0 - Broken Access Control vulnerabilityCVE-2026-655685.0 Medium
- visual composer website builderWordPress Visual Composer Website Builder Plugin < 45.15.0 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-557096.5 Medium
- visual composer website builderWordPress Visual Composer Website Builder plugin <= 45.11.0 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-482766.5 Medium
- visual composer website builder, visualcomposer visual composer website builder +1 moreWordPress Visual Composer Website Builder plugin <= 45.10.0 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-462546.5 Medium
- visual composer website builder, visualcomposer visual composer website builder +1 moreWordPress Visual Composer Website Builder, Landing Page Builder, Custom Theme Builder, Maintenance Mode & Coming Soon Pages plugin <= 45.8.0 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-356536.5 Medium
- visual composer website builderWordPress Visual Composer plugin <= 45.6.0 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-279975.9 Medium
- visual composer website builder, visualcomposer visual composer website builder +1 moreVisual Composer Premium <= 45.6.0 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2023-68806.4 Medium
- visual composer website builder, visualcomposer visual composer website builder +1 moreVisual Composer <= 26.0 - Multiple Cross-Site ScriptingCVE-2020-367225.5 Medium