Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Live Composer – Free WordPress Website Builder — Vulnerabilities & Security Advisories 2

All 2 CVE vulnerabilities found in Live Composer – Free WordPress Website Builder, with AI-generated Chinese analysis, references, and POCs.

Vendor: livecomposer

CVE IDTitleCVSSSeverityPublished
CVE-2025-14071 Live Composer – Free WordPress Website Builder <= 2.0.2 - Authenticated (Contributor+) PHP Object Injection via dslc_module_posts_output Shortcode CWE-502 7.5 High2025-12-21
CVE-2025-13537 Live Composer – Free WordPress Website Builder <= 2.0.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting CWE-79 6.4 Medium2025-12-17

All 2 known CVE vulnerabilities affecting Live Composer – Free WordPress Website Builder with full Chinese analysis, references, and POCs where available.