Livecomposer Live Composer – Free WordPress Website Builder
2 CVEs affecting Livecomposer Live Composer – Free WordPress Website Builder. Latest disclosed: 2025-12-21. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-14071 | High | 7.5 | 2025-12-21 | The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.0.2 via d… |
CVE-2025-13537 | Medium | 6.4 | 2025-12-17 | The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to multiple Stored Cross-Site Scripting vulnerabilities via DOM manipulat… |