Extension WordPress
Vulnérabilités Live Composer – Free WordPress Website Builder
Cette page rassemble les failles publiées pour Live Composer – Free WordPress Website Builder, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Live Composer – Free WordPress Website Builder
11 fiches
Page Builder: Live Composer <= 2.0.6 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Page Builder: Live Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.0.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level…
*-2.0.6
Non indiqué
22/12/2025
Live Composer – Free WordPress Website Builder <= 2.0.2 – Authenticated (Contributor+) PHP Object Injection via dslc_module_posts_output Shortcode
The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.0.2 via deserialization of untrusted input in the dslc_module_posts_output shortcode. This makes it possible…
*-2.0.2
2.0.3
20/12/2025
Live Composer – Free WordPress Website Builder <= 2.0.2 – Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to multiple Stored Cross-Site Scripting vulnerabilities via DOM manipulation in all versions up to, and including, 2.0.2 due to insufficient input sanitization and output escaping…
*-2.0.2
2.0.3
16/12/2025
Page Builder: Live Composer <= 1.5.42 – Authenticated (Contributor+) PHP Object Injection
The Page Builder: Live Composer plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.5.42 via deserialization of untrusted input. This makes it possible for authenticated attackers, with Contributor-level access and…
*-1.5.42
1.5.43
19/06/2024
Page Builder: Live Composer <= 1.5.42 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Page Builder: Live Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.5.42 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level…
*-1.5.42
1.5.43
19/06/2024
Page Builder: Live Composer <= 1.5.47 – Authenticated (Author+) Stored Cross-Site Scripting
The Page Builder: Live Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.5.47 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with author-level…
*-1.5.47
1.5.48
18/06/2024
Page Builder: Live Composer <= 1.5.38 – Missing Authorization
The Page Builder: Live Composer plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the dslc_ajax_add_module() function in versions up to, and including, 1.5.38. This makes it possible for authenticated…
*-1.5.38
1.5.39
23/04/2024
Page Builder: Live Composer <= 1.5.35 – Cross-Site Request Forgery
The Page Builder: Live Composer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.5.35. This is due to missing or incorrect nonce validation on several functions. This makes it possible for…
*-1.5.35
1.5.36
10/04/2024
Page Builder: Live Composer <= 1.5.25 – Authenticated (Author+) PHP Object Injection
The Page Builder: Live Composer plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.5.25 via deserialization of untrusted input. This makes it possible for authenticated attackers, with author-level access and…
*-1.5.28
1.5.29
03/01/2024
Page Builder: Live Composer <= 1.5.23 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Page Builder: Live Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting parameter in versions up to, and including, 1.5.23 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with…
*-1.5.23
1.5.24
03/01/2024
Page Builder: Live Composer <= 1.5.22 – Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The Page Builder: Live Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in versions up to, and including, 1.5.22 due to insufficient input sanitization and output escaping on user supplied attributes. This…
*-1.5.22
1.5.23
24/01/2023
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.