All 2 CVE vulnerabilities found in Live Composer – Free WordPress Website Builder, with AI-generated Chinese analysis, references, and POCs.
Vendor: livecomposer
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2025-14071 | Live Composer – Free WordPress Website Builder <= 2.0.2 - Authenticated (Contributor+) PHP Object Injection via dslc_module_posts_output Shortcode CWE-502 | 7.5 | High | 2025-12-21 |
| CVE-2025-13537 | Live Composer – Free WordPress Website Builder <= 2.0.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting CWE-79 | 6.4 | Medium | 2025-12-17 |
All 2 known CVE vulnerabilities affecting Live Composer – Free WordPress Website Builder with full Chinese analysis, references, and POCs where available.