Advisories · Technology

visualcomposer Visual Composer Website Builder.

Every CVE that names visualcomposer Visual Composer Website Builder among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-12227 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Visual Composer Website Builder <= 45.16.0 - Unauthenticated Local File Inclusion via 'vcv-template' Parameter
- visualcomposer Visual Composer Website Builder
- File inclusion
Not analysed yet 24 Sept 2026
CVE-2023-6880 CVE record

CVSS 6.4 Medium

Visual Composer Premium <= 45.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
- visualcomposer Visual Composer Website Builder
- Cross-site scripting (XSS)
Not analysed yet 13 Mar 2024
CVE-2020-36722 CVE record

CVSS 5.5 Medium

Visual Composer <= 26.0 - Multiple Cross-Site Scripting
- visualcomposer Visual Composer Website Builder
- Cross-site scripting (XSS)
Not analysed yet 7 Jun 2023