Visual Composer

8 CVEs across 2 Visual Composer products. Browse Visual Composer vulnerabilities, severities, and proof-of-concept exploits.

Visual Composer products with known CVEs

ProductCVEs
Visual Composer Website Builder7
Visual Composer Starter1
Visual Composer CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-62138Medium6.52026-09-11Contributor Cross Site Scripting (XSS) in Visual Composer Website Builder <= 45.16.1 versions.
CVE-2026-65568Medium5.02026-07-27Contributor Broken Access Control in Visual Composer Website Builder <= 45.15.0 versions.
CVE-2025-55709Medium6.52025-08-14Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Visual Composer Visual Composer Website Builder visualcom…
CVE-2025-48276Medium6.52025-05-19Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Visual Composer Visual Composer Website Builder visualcom…
CVE-2025-46254Medium6.52025-04-22Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Visual Composer Visual Composer Website Builder visualcom…
CVE-2024-43263Medium6.52024-08-18Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Visual Composer Visual Composer Starter allows Sto…
CVE-2024-35653Medium6.52024-06-04Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Visual Composer Visual Composer Website Builder visualcom…
CVE-2024-27997Medium5.92024-03-19Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Visual Composer Visual Composer Website Builder visualcom…