Visualcomposer
4 CVEs across 3 Visualcomposer products. Browse Visualcomposer vulnerabilities, severities, and proof-of-concept exploits.
Visualcomposer products with known CVEs
Visualcomposer CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2025-46254 | Medium | 6.5 | 2025-04-22 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Visual Composer Visual Composer Website Builder visualcom… |
CVE-2024-35653 | Medium | 6.5 | 2024-06-04 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Visual Composer Visual Composer Website Builder visualcom… |
CVE-2023-6880 | Medium | 6.4 | 2024-03-13 | The Visual Composer Website Builder, Landing Page Builder, Custom Theme Builder, Maintenance Mode & Coming Soon Pages plugin for WordPress is vulnerable to Sto… |
CVE-2020-36722 | Medium | 5.5 | 2023-06-07 | The Visual Composer plugin for WordPress is vulnerable to Cross-Site Scripting in versions up to, and including, 26.0 due to insufficient input sanitization an… |
CVE-2022-2516 | Medium | 6.4 | 2022-09-06 | The Visual Composer Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the post/page 'Title' value in versions up to, and in… |
CVE-2022-2430 | Medium | 6.4 | 2022-09-06 | The Visual Composer Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Text Block' feature in versions up to, and inclu… |