Live Composer – Free WordPress Website Builder vulnerabilities
Plugin slug live-composer-page-builder · 20 known vulnerabilities · latest disclosed 2026-11-11 · WordPress.org page
1 vulnerability has no fixed version yet. If you use this plugin, consider disabling or replacing it until a fix is released.
4 of 20 rated high or critical (CVSS 7 or more).
Known vulnerabilities in Live Composer – Free WordPress Website Builder
| Severity | Affected versions | Fixed in | CVE | Published | Details |
|---|---|---|---|---|---|
| Medium 6.4 | < 2.1.24 | 2.1.24 | CVE-2026-119531 | 2026-11-11 | Advisory |
| Medium 4.4 | <= 2.1.22 | 2.1.23 | CVE-2025-15708 | 2026-11-05 | Advisory |
| Medium 6.4 | <= 2.1.22 | 2.1.23 | CVE-2026-119073 | 2026-11-05 | Advisory |
| Medium 6.4 | <= 2.1.21 | 2.1.22 | CVE-2026-16778 | 2026-09-21 | Advisory |
| High 8.8 | <= 2.1.18 | 2.1.19 | CVE-2026-16502 | 2026-09-07 | Advisory |
| Medium 6.4 | <= 2.1.19 | 2.1.20 | CVE-2026-16786 | 2026-08-31 | Advisory |
| Medium 6.4 | <= 2.1.19 | 2.1.20 | CVE-2026-16788 | 2026-08-31 | Advisory |
| Medium 6.4 | <= 2.1.19 | 2.1.20 | CVE-2026-16787 | 2026-08-31 | Advisory |
| Medium 6.4 | <= 2.1.19 | 2.1.20 | CVE-2026-13203 | 2026-08-31 | Advisory |
| Medium 6.4 | <= 2.0.6 | No fix yet | CVE-2025-68598 | 2025-12-22 | Advisory |
| High 7.5 | <= 2.0.2 | 2.0.3 | CVE-2025-14071 | 2025-12-20 | Advisory |
| Medium 6.4 | <= 2.0.2 | 2.0.3 | CVE-2025-13537 | 2025-12-16 | Advisory |
| Medium 6.4 | <= 1.5.42 | 1.5.43 | CVE-2024-35779 | 2024-06-19 | Advisory |
| High 7.5 | <= 1.5.42 | 1.5.43 | CVE-2024-35780 | 2024-06-19 | Advisory |
| Medium 6.4 | <= 1.5.47 | 1.5.48 | CVE-2024-35768 | 2024-06-18 | Advisory |
| Medium 4.3 | <= 1.5.38 | 1.5.39 | CVE-2024-32957 | 2024-04-23 | Advisory |
| Medium 4.3 | <= 1.5.35 | 1.5.36 | CVE-2024-31933 | 2024-04-10 | Advisory |
| Medium 6.4 | <= 1.5.23 | 1.5.24 | CVE-2023-52193 | 2024-01-03 | Advisory |
| High 8.8 | <= 1.5.28 | 1.5.29 | CVE-2023-52206 | 2024-01-03 | Advisory |
| Medium 6.4 | <= 1.5.22 | 1.5.23 | CVE-2022-4669 | 2023-01-24 | Advisory |
Check if a site is affected
Enter a site address to see which version of Live Composer – Free WordPress Website Builder and other plugins it runs, and whether they match a known vulnerability.
Questions
Is the Live Composer – Free WordPress Website Builder plugin safe to use?
1 known issue(s) have no fix yet, so check the table above before using it.
How do I check which version of Live Composer – Free WordPress Website Builder my site runs?
In WordPress go to Plugins > Installed Plugins. From the outside, the free PluginPeek scan below reads the version from the site's public files.
How do I fix a vulnerable plugin?
Make a full backup, then update it from Dashboard > Updates and check the site afterwards. If you would rather not, we can do it for a fixed $99, paid after you have checked the site.