LC
Product
Live Composer – Free WordPress Website Builder
8
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 6Low 0
Watch
Add Live Composer – Free WordPress Website Builder to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-16502 | 8.8 | Sep 8 | Live Composer <= 2.1.18 - Authenticated (Contributor+) PHP Object Injection via Shortcode Affected: through 2.1.18 |
| CVE-2025-14071 | 7.5 | Dec 21 | Live Composer – Free WordPress Website Builder <= 2.0.2 - Authenticated (Contributor+) PHP Object Injection via dslc_module_posts_output Shortcode Affected: through 2.0.2 |
Showing 2
