CVE-2025-15713

The Live Composer WordPress plugin, in versions prior to 2.1.24 , contains a vulnerability where it fails to properly sanitise and escape certain page-builder module settings before outputting them. This flaw allows users with access to the builder (typically Administrators ) to inject arbitrary ...