Visualcomposer

7 CVEs across 3 Visualcomposer products. Browse Visualcomposer vulnerabilities, severities, and proof-of-concept exploits.

Visualcomposer products with known CVEs

ProductCVEs
Visual Composer Website Builder6
Visual Composer Website Builder3
Visual Composer Website Builder, Landing Page Builder, Custom Theme Builder, Maintenance Mode & Coming Soon Pages2
Visualcomposer CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-12227Critical9.82026-09-24The Visual Composer Website Builder plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 45.16.0 via the `vcv-templ…
CVE-2025-46254Medium6.52025-04-22Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Visual Composer Visual Composer Website Builder visualcom…
CVE-2024-35653Medium6.52024-06-04Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Visual Composer Visual Composer Website Builder visualcom…
CVE-2023-6880Medium6.42024-03-13The Visual Composer Website Builder, Landing Page Builder, Custom Theme Builder, Maintenance Mode & Coming Soon Pages plugin for WordPress is vulnerable to Sto…
CVE-2020-36722Medium5.52023-06-07The Visual Composer plugin for WordPress is vulnerable to Cross-Site Scripting in versions up to, and including, 26.0 due to insufficient input sanitization an…
CVE-2022-2516Medium6.42022-09-06The Visual Composer Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the post/page 'Title' value in versions up to, and in…
CVE-2022-2430Medium6.42022-09-06The Visual Composer Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Text Block' feature in versions up to, and inclu…