CVE-2026-62138: Visual Composer Website Builder

Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Contributor Cross Site Scripting (XSS) in Visual Composer Website Builder <= 45.16.1 versions.

Affected products

• Visual Composer Visual Composer Website Builder: up to and including 45.16.1

Published 2026-09-11. Last modified 2026-09-11.