Skip to content
OpenAdvisories

Vendor

Visual Composer

10 known vulnerabilities.

Products

Visual Composer Website Builder 9 Visual Composer Starter 1
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-106596

    WordPress Visual Composer Website Builder plugin <= 45.16.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Visual Composer Visual Composer Website Builder visualcomposer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Visual Composer Website Builder: from n/a through 45.16.3.

    Visual Composer Visual Composer Website Builder
  • Medium 6.5
    CVE-2026-97262

    WordPress Visual Composer Website Builder plugin <= 45.16.2 - Cross Site Scripting (XSS) vulnerability

    Contributor Cross Site Scripting (XSS) in Visual Composer Website Builder <= 45.16.2 versions.

    Visual Composer Visual Composer Website Builder
  • Medium 6.5
    CVE-2026-62138

    WordPress Visual Composer Website Builder plugin <= 45.16.1 - Cross Site Scripting (XSS) vulnerability

    Contributor Cross Site Scripting (XSS) in Visual Composer Website Builder <= 45.16.1 versions.

    Visual Composer Visual Composer Website Builder
  • Medium 5.0
    CVE-2026-65568

    WordPress Visual Composer Website Builder plugin <= 45.15.0 - Broken Access Control vulnerability

    Contributor Broken Access Control in Visual Composer Website Builder <= 45.15.0 versions.

    Visual Composer Visual Composer Website Builder
  • Medium 6.5
    CVE-2025-55709

    WordPress Visual Composer Website Builder Plugin < 45.15.0 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Visual Composer Visual Composer Website Builder visualcomposer allows Stored XSS.This issue affects Visual Composer Website Builder: from n/a through < 45.15…

    Visual Composer Visual Composer Website Builder
  • Medium 6.5
    CVE-2025-48276

    WordPress Visual Composer Website Builder plugin <= 45.11.0 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Visual Composer Visual Composer Website Builder visualcomposer allows Stored XSS.This issue affects Visual Composer Website Builder: from n/a through <= 45.1…

    Visual Composer Visual Composer Website Builder
  • Medium 6.5
    CVE-2025-46254

    WordPress Visual Composer Website Builder plugin <= 45.10.0 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Visual Composer Visual Composer Website Builder visualcomposer allows Stored XSS.This issue affects Visual Composer Website Builder: from n/a through <= 45.1…

    Visual Composer Visual Composer Website Builder
  • Medium 6.5
    CVE-2024-43263

    WordPress Visual Composer Starter theme <= 3.3 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Visual Composer Visual Composer Starter allows Stored XSS.This issue affects Visual Composer Starter: from n/a through 3.3.

    Visual Composer Visual Composer Starter
  • Medium 6.5
    CVE-2024-35653

    WordPress Visual Composer Website Builder, Landing Page Builder, Custom Theme Builder, Maintenance Mode & Coming Soon Pages plugin <= 45.8.0 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Visual Composer Visual Composer Website Builder visualcomposer.This issue affects Visual Composer Website Builder: from n/a through <= 45.8.0.

    Visual Composer Visual Composer Website Builder
  • Medium 5.9
    CVE-2024-27997

    WordPress Visual Composer plugin <= 45.6.0 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Visual Composer Visual Composer Website Builder visualcomposer.This issue affects Visual Composer Website Builder: from n/a through <= 45.6.0.

    Visual Composer Visual Composer Website Builder