Approved changes feed: RSS · Atom

cpe:2.3:a:livecomposer:page_builder:_live_composer:*:*:*:*:*:*:*:*

part: a version: _live_composer update: *

VendorLivecomposer (cd4d9098-fca5-5945-a368-3e12411e3b9d)
ProductPage Builder (73f6d065-4624-5d95-9035-4ee105309cdd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-68598 vulnerable 2026-06-08 07:41:21.435027 WordPress Page Builder: Live Composer plugin <= 2.1.13 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LiveComposer Page Builder: Live Composer live-composer-page-builder allows Stored XSS.This issue affects Page Builder: Live Composer: from n/a through <= 2.1.13.
Published: 2025-12-24T13:10:45.982Z
Updated: 2026-04-28T16:14:31.256Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-35768 vulnerable 2026-06-08 06:39:42.681638 WordPress Page Builder: Live Composer plugin <= 2.1.11 - Cross Site Scripting (XSS) vulnerability
MEDIUM (5.9)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LiveComposer Page Builder: Live Composer live-composer-page-builder allows DOM-Based XSS.This issue affects Page Builder: Live Composer: from n/a through <= 2.1.11.
Published: 2024-06-21T12:27:55.000Z
Updated: 2026-04-28T16:09:55.154Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.