visualcomposer

Products

Exploited and recent CVEs

  • CVE-2026-12227 Critical 9.8 Visual Composer Website Builder <= 45.16.0 - Unauthenticated Local File Inclusion via 'vcv-template' Parameter 2.8%
  • CVE-2023-6880 Medium 6.4 Visual Composer Premium <= 45.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.4%
  • CVE-2020-36722 Medium 5.5 Visual Composer <= 26.0 - Multiple Cross-Site Scripting 0.7%
  • CVE-2022-2516 Medium 6.4 Visual Composer Website Builder <= 45.0 - Authenticated Stored Cross-Site Scripting via 'Title' 0.6%
  • CVE-2022-2430 Medium 6.4 Visual Composer Website Builder <= 45.0 - Authenticated Stored Cross-Site Scripting via 'Text Block' 0.6%