visualcomposer
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Visual Composer Website Builder | 3 | – | Sep 24, 2026 |
| Visual Composer Website Builder, Landing Page Builder, Custom Theme Builder, Maintenance Mode & Coming Soon Pages | 2 | – | Sep 6, 2022 |
Exploited and recent CVEs
- CVE-2026-12227 Visual Composer Website Builder <= 45.16.0 - Unauthenticated Local File Inclusion via 'vcv-template' Parameter 2.8%
- CVE-2023-6880 Visual Composer Premium <= 45.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.4%
- CVE-2020-36722 Visual Composer <= 26.0 - Multiple Cross-Site Scripting 0.7%
- CVE-2022-2516 Visual Composer Website Builder <= 45.0 - Authenticated Stored Cross-Site Scripting via 'Title' 0.6%
- CVE-2022-2430 Visual Composer Website Builder <= 45.0 - Authenticated Stored Cross-Site Scripting via 'Text Block' 0.6%