Vulnerabilities

TI-2025-42119 CVE-2025-68598 · GHSA-36q5-9xfc-m5q6

WordPress Page Builder: Live Composer plugin <= 2.1.22 - Cross Site Scripting (XSS) vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Live Composer Team Page Builder: Live Composer live-composer-page-builder allows Stored XSS.This issue affects Page Bu…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00159 Published 2025-12-24 No fix listed CWE-79

TI-2024-23637 CVE-2024-35768 · GHSA-9fm6-mqj4-6fg4

WordPress Page Builder: Live Composer plugin <= 2.1.22 - Cross Site Scripting (XSS) vulnerability

LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Live Composer Team Page Builder: Live Composer live-composer-page-builder allows DOM-Based XSS.This issue affects Page…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00315 Published 2024-06-21 No fix listed CWE-79

TI-2024-23648 CVE-2024-35779 · GHSA-9pp5-g326-qcxc

WordPress Page Builder: Live Composer plugin <= 1.5.42 - Contributor+ Shortcode Cross Site Scripting (XSS) vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Live Composer Team Page Builder: Live Composer allows Stored XSS.This issue affects Page Builder: Live Composer…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00295 Published 2024-06-21 No fix listed CWE-79

TI-2024-23649 CVE-2024-35780 · GHSA-qhv7-vr66-j5ff

WordPress Page Builder: Live Composer plugin <= 1.5.42 - Contributor+ PHP Object Injection vulnerability

LOW 39

Deserialization of Untrusted Data vulnerability in Live Composer Team Page Builder: Live Composer.This issue affects Page Builder: Live Composer: from n/a through 1.5.42.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00422 Published 2024-06-19 No fix listed CWE-502

TI-2024-21824 CVE-2024-32957 · GHSA-x8vp-jrrr-mxv3

WordPress Page Builder: Live Composer plugin <= 1.5.38 - Broken Access Control vulnerability

LOW 22

Missing Authorization vulnerability in Live Composer Team Page Builder: Live Composer.This issue affects Page Builder: Live Composer: from n/a through 1.5.38.

CVSS 3.1MEDIUM 4.7 Network High privileges No interaction EPSS 0.00379 Published 2024-04-26 No fix listed CWE-862

TI-2024-21036 CVE-2024-31933 · GHSA-hwmg-w34r-mgc2

WordPress Page Builder: Live Composer plugin <= 1.5.35 - Cross Site Request Forgery (CSRF) vulnerability

LOW 24

Cross-Site Request Forgery (CSRF) vulnerability in Live Composer Team Page Builder: Live Composer.This issue affects Page Builder: Live Composer: from n/a through 1.5.35.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00197 Published 2024-04-15 No fix listed CWE-352

TI-2023-28621 CVE-2023-52193 · GHSA-gwfv-rx78-gch3

WordPress Page Builder: Live Composer Plugin <= 1.5.23 is vulnerable to Cross Site Scripting (XSS)

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Live Composer Team Page Builder: Live Composer allows Stored XSS.This issue affects Page Builder: Live Composer: from…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0031 Published 2024-02-01 No fix listed CWE-79

TI-2023-28634 CVE-2023-52206 · GHSA-x8v8-8hj9-w975

WordPress Page Builder: Live Composer Plugin <= 1.5.25 is vulnerable to PHP Object Injection

LOW 36

Deserialization of Untrusted Data vulnerability in Live Composer Team Page Builder: Live Composer live-composer-page-builder.This issue affects Page Builder: Live Composer: from n/a through 1.5.25.

CVSS 3.1HIGH 7.7 Network High privileges No interaction EPSS 0.00496 Published 2024-01-08 No fix listed CWE-502

TI-2022-04267 CVE-2022-4669 · GHSA-4mw6-hf2w-jx7x

Page Builder: Live Composer < 1.5.23 - Contributor+ Stored XSS via Shortcode

MEDIUM 58

The Page Builder: Live Composer WordPress plugin before 1.5.23 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow user…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00393 Published 2023-02-21 Fixed in 1.5.23 CWE-79

Vulnerabilities

Filters