Vulnerabilities / Live Composer
Live Composer vulnerabilities
Advisories WPSec published for Live Composer – Free WordPress Website Builder. Other sources may list more. Its attack surface: Live Composer on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-11-05 | WPSEC-2026-2549 | Live Composer <= 2.1.22 - Authenticated (Author+) Stored Cross-Site Scripting via Custom URL Post Meta | Medium 6.4 | 2.1.23 |
| 2026-11-05 | WPSEC-2026-2548 | Live Composer <= 2.1.22 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pagination Module Options | Medium 6.4 | 2.1.23 |
License: CC BY 4.0