CVE-2025-15714

The Live Composer WordPress plugin (versions before 2.1.24 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is a failure to properly sanitise and escape certain settings within the Button module before they are rendered on the front end. This flaw allows high-privilege users,...