Visualcomposer vulnerabilities

Products

• Visual Composer Website Builder 6
• Visual Composer Website Builder 3

Newest

• visual composer website builder, visualcomposer visual composer website builder +1 more Visual Composer Website Builder <= 45.16.0 - Unauthenticated Local File Inclusion via 'vcv-template' Parameter CVE-2026-12227 Public exploit 9.8 CriticalSeptember 24, 2026
• visual composer website builder, visualcomposer visual composer website builder +1 more WordPress Visual Composer Website Builder plugin <= 45.10.0 - Cross Site Scripting (XSS) vulnerability CVE-2025-46254 6.5 MediumApril 22, 2025
• visual composer website builder, visualcomposer visual composer website builder +1 more WordPress Visual Composer Website Builder, Landing Page Builder, Custom Theme Builder, Maintenance Mode & Coming Soon Pages plugin <= 45.8.0 - Cross Site Scripting (XSS) vulnerability CVE-2024-35653 6.5 MediumJune 4, 2024
• visual composer website builder, visualcomposer visual composer website builder +1 more Visual Composer Premium <= 45.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2023-6880 6.4 MediumMarch 13, 2024
• visual composer website builder, visualcomposer visual composer website builder +1 more Visual Composer <= 26.0 - Multiple Cross-Site Scripting CVE-2020-36722 5.5 MediumJune 7, 2023
• visualcomposer visual composer website builder, visual composer website builder, landing page builder, custom theme builder, maintenance mode & coming soon pages +1 more Visual Composer Website Builder <= 45.0 - Authenticated Stored Cross-Site Scripting via 'Title' CVE-2022-2516 6.4 MediumSeptember 6, 2022
• visualcomposer visual composer website builder, visual composer website builder, landing page builder, custom theme builder, maintenance mode & coming soon pages +1 more Visual Composer Website Builder <= 45.0 - Authenticated Stored Cross-Site Scripting via 'Text Block' CVE-2022-2430 6.4 MediumSeptember 6, 2022