Livecomposer vulnerabilities
We track 2 vulnerabilities in Livecomposer products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 8, 2026.
2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score
Latest Livecomposer vulnerabilities
- 8.8 High severity
Live Composer – Free WordPress Website Builder: Deserialization of Untrusted Data
The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.1.18 via deserialization of untrusted input . This makes it possible for authenticated attackers, with contrib
- 7.5 High severity
Live Composer – Free WordPress Website Builder: Deserialization of Untrusted Data
The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.0.2 via deserialization of untrusted input in the dslc_module_posts_output shortcode. This makes it possible f