visual_composer_website_builder vulnerabilities

CVEs whose affected-version data names the visual_composer_website_builder package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-12227Critical· 9.8PoC

yesterday

The Visual Composer Website Builder plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 45.16.0 via the `vcv-template` parameter

The Visual Composer Website Builder plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 45.16.0 via the `vcv-template` parameter. This makes it possible for unauthenticated attackers to includ…

▾ Abyssalvisualcomposer · Visual Composer Website BuilderEPSS 0.77%via NVD