Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Visual Composer Website Builder — Vulnerabilities & Security Advisories 12

All 12 CVE vulnerabilities found in Visual Composer Website Builder, with AI-generated Chinese analysis, references, and POCs.

Vendor: visualcomposer

CVE ID Title CVSS Severity Published
CVE-2026-106596 WordPress Visual Composer Website Builder plugin <= 45.16.3 - Broken Access Control vulnerability CWE-862 5.3 Medium 2026-10-08
CVE-2026-97262 WordPress Visual Composer Website Builder plugin <= 45.16.2 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium 2026-09-30
CVE-2026-12227 Visual Composer Website Builder <= 45.16.0 - Unauthenticated Local File Inclusion via 'vcv-template' Parameter CWE-98 9.8 Critical 2026-09-24
CVE-2026-62138 WordPress Visual Composer Website Builder plugin <= 45.16.1 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium 2026-09-11
CVE-2026-65568 WordPress Visual Composer Website Builder plugin <= 45.15.0 - Broken Access Control vulnerability CWE-862 5.0 Medium 2026-07-27
CVE-2025-55709 WordPress Visual Composer Website Builder Plugin < 45.15.0 - Cross Site Scripting (XSS) Vulnerability CWE-79 6.5 Medium 2025-08-14
CVE-2025-48276 WordPress Visual Composer Website Builder plugin <= 45.11.0 - Cross Site Scripting (XSS) Vulnerability CWE-79 6.5 Medium 2025-05-19
CVE-2025-46254 WordPress Visual Composer Website Builder plugin <= 45.10.0 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium 2025-04-22
CVE-2024-35653 WordPress Visual Composer Website Builder, Landing Page Builder, Custom Theme Builder, Maintenance Mode & Coming Soon Pages plugin <= 45.8.0 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium 2024-06-04
CVE-2024-27997 WordPress Visual Composer plugin <= 45.6.0 - Cross Site Scripting (XSS) vulnerability CWE-79 5.9 Medium 2024-03-19
CVE-2023-6880 Visual Composer Premium <= 45.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 6.4 Medium 2024-03-13
CVE-2020-36722 Visual Composer <= 26.0 - Multiple Cross-Site Scripting CWE-79 5.5 Medium 2023-06-07

All 12 known CVE vulnerabilities affecting Visual Composer Website Builder with full Chinese analysis, references, and POCs where available.