CVE-2026-106596: Visual Composer Website Builder

Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days.

Missing Authorization vulnerability in Visual Composer Visual Composer Website Builder visualcomposer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Visual Composer Website Builder: from n/a through 45.16.3.

Affected products

• Visual Composer Visual Composer Website Builder: up to and including 45.16.3

Published 2026-10-08. Last modified 2026-10-08.