CVE-2026-65568mediumCWE-862

CVE-2026-65568: falha de média gravidade em Visual Composer Website Builder

WordPress Visual Composer Website Builder plugin <= 45.15.0 - Broken Access Control vulnerability

Publicada em

Seguir esta CVE+ Monitorar Visual Composer Website Builder

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5epss 0.3%
Contributor Broken Access Control in Visual Composer Website Builder <= 45.15.0 versions.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N
Produtos afetados
Visual Composer · Visual Composer Website Builder
CVEs relacionadas — Visual Composer Website Builder

No mesmo produto, das mais perigosas para as menos.

CVE-2024-27997MEDIUMWordPress Visual Composer plugin <= 45.6.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-35653MEDIUMWordPress Visual Composer Website Builder, Landing Page Builder, Custom Theme Builder, Maintenance Mode & Coming Soon Pages plugin <= 45.8.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-48276MEDIUMWordPress Visual Composer Website Builder plugin <= 45.11.0 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.3%CVE-2026-106596MEDIUMWordPress Visual Composer Website Builder plugin <= 45.16.3 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-46254MEDIUMWordPress Visual Composer Website Builder plugin <= 45.10.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-62138MEDIUMWordPress Visual Composer Website Builder plugin <= 45.16.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%