Approved changes feed: RSS · Atom

cpe:2.3:a:live_composer_team:page_builder:_live_composer:*:*:*:*:*:*:*:*

part: a version: _live_composer update: *

VendorLive Composer Team (a4b14f3b-9071-5343-ab45-8ae646c8e6ed)
ProductPage Builder (778bb4a6-fc70-5a2b-9d1b-97a7d24322ae)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-35780 vulnerable 2026-06-08 06:39:42.727513 WordPress Page Builder: Live Composer plugin <= 1.5.42 - Contributor+ PHP Object Injection vulnerability
HIGH (8.5)
Deserialization of Untrusted Data vulnerability in Live Composer Team Page Builder: Live Composer.This issue affects Page Builder: Live Composer: from n/a through 1.5.42.
Published: 2024-06-19T10:16:06.527Z
Updated: 2026-04-28T16:09:55.590Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-35779 vulnerable 2026-06-08 06:39:42.724714 WordPress Page Builder: Live Composer plugin <= 1.5.42 - Contributor+ Shortcode Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Live Composer Team Page Builder: Live Composer allows Stored XSS.This issue affects Page Builder: Live Composer: from n/a through 1.5.42.
Published: 2024-06-21T11:40:07.375Z
Updated: 2026-04-28T16:09:55.496Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32957 vulnerable 2026-06-08 06:37:24.780002 WordPress Page Builder: Live Composer plugin <= 1.5.38 - Broken Access Control vulnerability
MEDIUM (4.7)
Missing Authorization vulnerability in Live Composer Team Page Builder: Live Composer.This issue affects Page Builder: Live Composer: from n/a through 1.5.38.
Published: 2024-04-26T10:58:36.110Z
Updated: 2026-04-28T16:09:42.287Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31933 vulnerable 2026-06-08 06:35:32.432833 WordPress Page Builder: Live Composer plugin <= 1.5.35 - Cross Site Request Forgery (CSRF) vulnerability
MEDIUM (5.4)
Cross-Site Request Forgery (CSRF) vulnerability in Live Composer Team Page Builder: Live Composer.This issue affects Page Builder: Live Composer: from n/a through 1.5.35.
Published: 2024-04-15T09:24:06.835Z
Updated: 2026-04-28T16:09:32.708Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-52206 vulnerable 2026-06-08 06:17:54.459041 WordPress Page Builder: Live Composer Plugin <= 1.5.25 is vulnerable to PHP Object Injection
HIGH (7.7)
Deserialization of Untrusted Data vulnerability in Live Composer Team Page Builder: Live Composer live-composer-page-builder.This issue affects Page Builder: Live Composer: from n/a through 1.5.25.
Published: 2024-01-08T19:32:07.020Z
Updated: 2026-04-28T16:09:06.822Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-52193 vulnerable 2026-06-08 06:17:54.428366 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.