Visualcomposer

Visual Composer Website Builder

13 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2026-97262

  • EPSS 0.13%
  • Veröffentlicht 30.09.2026 12:28:11
  • Zuletzt bearbeitet 30.09.2026 14:18:16

Contributor Cross Site Scripting (XSS) in Visual Composer Website Builder <= 45.16.2 versions.

9.8

CVE-2026-12227

  • EPSS 0.77%
  • Veröffentlicht 24.09.2026 09:27:45
  • Zuletzt bearbeitet 24.09.2026 16:17:06

The Visual Composer Website Builder plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 45.16.0 via the `vcv-template` parameter. This makes it possible for unauthenticated attackers to include and execute...

6.5

CVE-2026-62138

  • EPSS 0.13%
  • Veröffentlicht 11.09.2026 18:12:13
  • Zuletzt bearbeitet 11.09.2026 21:17:02

Contributor Cross Site Scripting (XSS) in Visual Composer Website Builder <= 45.16.1 versions.

5

CVE-2026-65568

  • EPSS 0.17%
  • Veröffentlicht 27.07.2026 13:59:23
  • Zuletzt bearbeitet 27.07.2026 17:46:02

Contributor Broken Access Control in Visual Composer Website Builder <= 45.15.0 versions.

6.5

CVE-2025-55709

  • EPSS 0.17%
  • Veröffentlicht 14.08.2025 18:21:31
  • Zuletzt bearbeitet 23.04.2026 15:32:56

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Visual Composer Visual Composer Website Builder visualcomposer allows Stored XSS.This issue affects Visual Composer Website Builder: from n/a throug...

6.5

CVE-2025-48276

  • EPSS 0.24%
  • Veröffentlicht 19.05.2025 14:45:25
  • Zuletzt bearbeitet 23.04.2026 15:31:00

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Visual Composer Visual Composer Website Builder visualcomposer allows Stored XSS.This issue affects Visual Composer Website Builder: from n/a throug...

5.4

CVE-2025-46254

  • EPSS 0.21%
  • Veröffentlicht 22.04.2025 09:53:35
  • Zuletzt bearbeitet 23.04.2026 15:29:57

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Visual Composer Visual Composer Website Builder visualcomposer allows Stored XSS.This issue affects Visual Composer Website Builder: from n/a throug...

5.4

CVE-2024-35653

  • EPSS 0.28%
  • Veröffentlicht 04.06.2024 15:15:46
  • Zuletzt bearbeitet 23.04.2026 15:18:29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Visual Composer Visual Composer Website Builder visualcomposer.This issue affects Visual Composer Website Builder: from n/a through <= 45.8.0.

5.9

CVE-2024-27997

  • EPSS 0.35%
  • Veröffentlicht 19.03.2024 17:15:10
  • Zuletzt bearbeitet 23.04.2026 15:18:06

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Visual Composer Visual Composer Website Builder visualcomposer.This issue affects Visual Composer Website Builder: from n/a through <= 45.6.0.

5.4

CVE-2023-6880

  • EPSS 0.42%
  • Veröffentlicht 13.03.2024 16:15:09
  • Zuletzt bearbeitet 08.04.2026 18:18:44

The Visual Composer Website Builder, Landing Page Builder, Custom Theme Builder, Maintenance Mode & Coming Soon Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's custom fields in all versions up to, and includin...