Skip to content
OpenAdvisories

Vendor

livecomposer

8 known vulnerabilities.

Products

Live Composer – Free WordPress Website Builder 8
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2026-16502

    Live Composer <= 2.1.18 - Authenticated (Contributor+) PHP Object Injection via Shortcode

    The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.1.18 via deserialization of untrusted input . This makes it possible for authenticated attackers, with contri…

    livecomposer Live Composer – Free WordPress Website Builder Web / CMS
  • High 7.5
    CVE-2025-14071

    Live Composer – Free WordPress Website Builder <= 2.0.2 - Authenticated (Contributor+) PHP Object Injection via dslc_module_posts_output Shortcode

    The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.0.2 via deserialization of untrusted input in the dslc_module_posts_output shortcode. This makes it possible …

    livecomposer Live Composer – Free WordPress Website Builder Web / CMS