LI
Vendor
livecomposer
8
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-16778 | LC Live Composer – Free WordPress Website Builder livecomposer | 6.4 | Sep 22 | Live Composer <= 2.1.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'dslc_module_downloads_output' Shortcode Content |
| CVE-2026-16502 | LC Live Composer – Free WordPress Website Builder livecomposer | 8.8 | Sep 8 | Live Composer <= 2.1.18 - Authenticated (Contributor+) PHP Object Injection via Shortcode |
| CVE-2026-16788 | LC Live Composer – Free WordPress Website Builder livecomposer | 6.4 | Sep 1 | Live Composer <= 2.1.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via dslc_module_projects_output Shortcode |
| CVE-2026-16786 | LC Live Composer – Free WordPress Website Builder livecomposer | 6.4 | Sep 1 | Live Composer <= 2.1.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via dslc_module_testimonials_output Shortcode |
| CVE-2026-13203 | LC Live Composer – Free WordPress Website Builder livecomposer | 6.4 | Sep 1 | Live Composer <= 2.1.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'custom_id' Shortcode Attribute |
| CVE-2026-16787 | LC Live Composer – Free WordPress Website Builder livecomposer | 6.4 | Sep 1 | Live Composer <= 2.1.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'dslc_custom_field' Shortcode |
| CVE-2025-14071 | LC Live Composer – Free WordPress Website Builder livecomposer | 7.5 | Dec 21 | Live Composer – Free WordPress Website Builder <= 2.0.2 - Authenticated (Contributor+) PHP Object Injection via dslc_module_posts_output Shortcode |
| CVE-2025-13537 | LC Live Composer – Free WordPress Website Builder livecomposer | 6.4 | Dec 17 | Live Composer – Free WordPress Website Builder <= 2.0.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting |