Plugin icon

Visual Composer Website Builder

visualcomposer

Vulnerabilities:

9

Last Updated:

August 6, 2025

Active Installs:

40000

Published
Title
Fixed in
CVSS
Published
2025-08-14
Title
Visual Composer Website Builder < 45.15.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 45.15.0
CVSS
6.4 (medium)
Published
2025-05-19
Title
Visual Composer Website Builder < 45.12.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 45.12.0
CVSS
6.4 (medium)
Published
2025-04-22
Title
Visual Composer Website Builder < 45.11.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 45.11.0
CVSS
6.4 (medium)
Published
2024-06-03
Title
Visual Composer Website Builder < 45.9.0 - Authenticated (Editor+) Stored Cross-Site Scripting
Fixed in
Fixed in 45.9.0
CVSS
4.4 (medium)
Published
2024-03-15
Title
Visual Composer Website Builder < 45.7.0 - Authenticated (Editor+) Stored Cross-Site Scripting
Fixed in
Fixed in 45.7.0
CVSS
4.4 (medium)
Published
2024-02-29
Title
Visual Composer Premium < 45.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 45.7.0
CVSS
6.4 (medium)
Published
2022-08-29
Title
Visual Composer Website Builder < 45.0.1 - Authenticated Stored XSS via Title
Fixed in
Fixed in 45.0.1
CVSS
6.4 (medium)
Published
2022-08-29
Title
Visual Composer Website Builder < 45.0.1 - Authenticated Stored XSS via Text Block
Fixed in
Fixed in 45.0.1
CVSS
6.4 (medium)
Published
2020-05-18
Title
Visual Composer < 27.0 - Multiple Authenticated Cross-Site Scripting Issues
Fixed in
Fixed in 27.0
CVSS
8.7 (high)