visualcomposer vulnerabilities
5 published CVEs name visualcomposer among the affected products.
- Published CVEs
- 5
- Last 12 months
- 1
- Critical
- 1
- Known exploited
- 0
Critical 1High 0Medium 4Low 0Not scored 0
CVEs per yearBy the year they were published
- 20222
- 20231
- 20241
- 20261
Newest CVEs
- CVE-2026-12227
Visual Composer Website Builder <= 45.16.0 - Unauthenticated Local File Inclusion via 'vcv-template' Parameter
visualcomposer · Visual Composer Website Builder
Critical9.8 - CVE-2023-6880
Visual Composer Premium <= 45.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
visualcomposer · Visual Composer Website Builder
Medium6.4 - CVE-2020-36722
Visual Composer <= 26.0 - Multiple Cross-Site Scripting
visualcomposer · Visual Composer Website Builder
Medium5.5 - CVE-2022-2516
Visual Composer Website Builder <= 45.0 - Authenticated Stored Cross-Site Scripting via 'Title'
visualcomposer · Visual Composer Website Builder, Landing Page Builder, Custom Theme Builder, Maintenance Mode & Coming Soon Pages
Medium6.4 - CVE-2022-2430
Visual Composer Website Builder <= 45.0 - Authenticated Stored Cross-Site Scripting via 'Text Block'
visualcomposer · Visual Composer Website Builder, Landing Page Builder, Custom Theme Builder, Maintenance Mode & Coming Soon Pages
Medium6.4