Visualcomposer Visual Composer Website Builder
3 CVEs affecting Visualcomposer Visual Composer Website Builder. Latest disclosed: 2026-09-24. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-12227 | Critical | 9.8 | 2026-09-24 | The Visual Composer Website Builder plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 45.16.0 via the `vcv-templ… |
CVE-2023-6880 | Medium | 6.4 | 2024-03-13 | The Visual Composer Website Builder, Landing Page Builder, Custom Theme Builder, Maintenance Mode & Coming Soon Pages plugin for WordPress is vulnerable to Sto… |
CVE-2020-36722 | Medium | 5.5 | 2023-06-07 | The Visual Composer plugin for WordPress is vulnerable to Cross-Site Scripting in versions up to, and including, 26.0 due to insufficient input sanitization an… |