Visual Composer

Products

ProductCVEsExploitedLatest
Visual Composer Website Builder9–Oct 8, 2026
Visual Composer Starter1–Aug 18, 2024

Exploited and recent CVEs

  • CVE-2026-106596 Medium 5.3 WordPress Visual Composer Website Builder plugin <= 45.16.3 - Broken Access Control vulnerability 0.2%
  • CVE-2026-97262 Medium 6.5 WordPress Visual Composer Website Builder plugin <= 45.16.2 - Cross Site Scripting (XSS) vulnerability 0.1%
  • CVE-2026-62138 Medium 6.5 WordPress Visual Composer Website Builder plugin <= 45.16.1 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-65568 Medium 5.0 WordPress Visual Composer Website Builder plugin <= 45.15.0 - Broken Access Control vulnerability 0.3%
  • CVE-2025-55709 Medium 6.5 WordPress Visual Composer Website Builder Plugin < 45.15.0 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2025-48276 Medium 6.5 WordPress Visual Composer Website Builder plugin <= 45.11.0 - Cross Site Scripting (XSS) Vulnerability 0.3%
  • CVE-2025-46254 Medium 6.5 WordPress Visual Composer Website Builder plugin <= 45.10.0 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2024-43263 Medium 6.5 WordPress Visual Composer Starter theme <= 3.3 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-35653 Medium 6.5 WordPress Visual Composer Website Builder, Landing Page Builder, Custom Theme Builder, Maintenance Mode & Coming Soon Pages plugin <= 45.8.0 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-27997 Medium 5.9 WordPress Visual Composer plugin <= 45.6.0 - Cross Site Scripting (XSS) vulnerability 0.3%