LC
Product
Live Composer – Free WordPress Website Builder
by livecomposer · last CVE Sep 22, 2026
8
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 6Low 0
Watch

Add Live Composer – Free WordPress Website Builder to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-16502
8.8
1%
Sep 8
Live Composer <= 2.1.18 - Authenticated (Contributor+) PHP Object Injection via Shortcode
Affected: through 2.1.18
CVE-2025-14071
7.5
1%
Dec 21
Live Composer – Free WordPress Website Builder <= 2.0.2 - Authenticated (Contributor+) PHP Object Injection via dslc_module_posts_output Shortcode
Affected: through 2.0.2
Showing 2