Live Composer Team

Products

ProductCVEsExploitedLatest
Page Builder: Live Composer8–Dec 24, 2025

Exploited and recent CVEs

  • CVE-2025-68598 Medium 6.5 WordPress Page Builder: Live Composer plugin <= 2.1.22 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2024-35768 Medium 5.9 WordPress Page Builder: Live Composer plugin <= 2.1.22 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-35779 Medium 6.5 WordPress Page Builder: Live Composer plugin <= 1.5.42 - Contributor+ Shortcode Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-35780 High 8.5 WordPress Page Builder: Live Composer plugin <= 1.5.42 - Contributor+ PHP Object Injection vulnerability 0.4%
  • CVE-2024-32957 Medium 4.7 WordPress Page Builder: Live Composer plugin <= 1.5.38 - Broken Access Control vulnerability 0.4%
  • CVE-2024-31933 Medium 5.4 WordPress Page Builder: Live Composer plugin <= 1.5.35 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2023-52193 Medium 6.5 WordPress Page Builder: Live Composer Plugin <= 1.5.23 is vulnerable to Cross Site Scripting (XSS) 0.3%
  • CVE-2023-52206 High 7.7 WordPress Page Builder: Live Composer Plugin <= 1.5.25 is vulnerable to PHP Object Injection 0.5%