VendorsVisual Composervisual_composer_website_builderany version
Vulnerabilities

Visual Composer Visual Composer Website Builder any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

6CVEs
CVE-2024-35653
WordPress Visual Composer Website Builder, Landing Page Builder, Custom Theme Builder, Maintenance Mode & Coming Soon Pages plugin <= 45.8.0 - Cross Site Scripting (XSS) vulnerability
Published 2024-06-04 · Modified
6.5EPSS 0.003
CVE-2025-46254
WordPress Visual Composer Website Builder plugin <= 45.10.0 - Cross Site Scripting (XSS) vulnerability
Published 2025-04-22 · Modified
6.5EPSS 0.002
CVE-2022-2430
Visual Composer Website Builder <= 45.0 - Authenticated Stored Cross-Site Scripting via 'Text Block'
Published 2022-09-06 · Modified
6.4EPSS 0.006
CVE-2022-2516
Visual Composer Website Builder <= 45.0 - Authenticated Stored Cross-Site Scripting via 'Title'
Published 2022-09-06 · Modified
6.4EPSS 0.006
CVE-2023-6880
Visual Composer Premium <= 45.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published 2024-03-13 · Modified
6.4EPSS 0.004
CVE-2020-36722
Visual Composer <= 26.0 - Multiple Cross-Site Scripting
Published 2023-06-07 · Modified
5.5EPSS 0.007