VC
Product
Visual Composer Website Builder
9
CVEs
0
On KEV
6.5
Max CVSS
2
New 30D
Severity mix
Critical 0High 0Medium 9Low 0
Watch
Add Visual Composer Website Builder to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-97262 | 6.5 | Sep 30 | WordPress Visual Composer Website Builder plugin <= 45.16.2 - Cross Site Scripting (XSS) vulnerability Affected: through 45.16.2 |
| CVE-2026-62138 | 6.5 | Sep 11 | WordPress Visual Composer Website Builder plugin <= 45.16.1 - Cross Site Scripting (XSS) vulnerability Affected: through 45.16.1 |
| CVE-2025-55709 | 6.5 | Aug 14 | WordPress Visual Composer Website Builder Plugin < 45.15.0 - Cross Site Scripting (XSS) Vulnerability Affected: through 45.15.0 |
| CVE-2025-48276 | 6.5 | May 19 | WordPress Visual Composer Website Builder plugin <= 45.11.0 - Cross Site Scripting (XSS) Vulnerability Affected: through 45.11.0 |
| CVE-2024-27997 | 5.9 | Mar 19 | WordPress Visual Composer plugin <= 45.6.0 - Cross Site Scripting (XSS) vulnerability Affected: through 45.6.0 |
| CVE-2025-46254 | 5.4 | Apr 22 | WordPress Visual Composer Website Builder plugin <= 45.10.0 - Cross Site Scripting (XSS) vulnerability Affected: through 45.10.0 |
| CVE-2024-35653 | 5.4 | Jun 4 | WordPress Visual Composer Website Builder, Landing Page Builder, Custom Theme Builder, Maintenance Mode & Coming Soon Pages plugin <= 45.8.0 - Cross Site Scripting (XSS) vulnerability Affected: through 45.8.0 |
| CVE-2026-106596 | 5.3 | Oct 8 | WordPress Visual Composer Website Builder plugin <= 45.16.3 - Broken Access Control vulnerability Affected: through 45.16.3 |
| CVE-2026-65568 | 5.0 | Jul 27 | WordPress Visual Composer Website Builder plugin <= 45.15.0 - Broken Access Control vulnerability Affected: through 45.15.0 |
Showing 9