CVE Intelligence

Live Composer Team vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Live Composer Team products: 1 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2025-68598 Medium · 6.5 CWE-79 Dec 24, 2025
WordPress Page Builder: Live Composer plugin <= 2.1.22 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Live Composer Team Page Builder: Live Composer live-composer-page-builder allows Stored XSS.This issue affects Page Builder: Live Composer: from n/a through 2.1.22.