What’s Vulnerable › Products

CMSMasters Content Composer vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your CMSMasters Content Composer version is affected

Latest CMSMasters Content Composer vulnerabilities

• CVE-2026-25326 — WordPress CMSMasters Content Composer plugin <= 1.4.5 - Local File Inclusion vulnerability (CVSS 7.5)
• CVE-2026-23547 — WordPress CMSMasters Content Composer plugin <= 2.5.8 - Broken Access Control vulnerability (CVSS 7.1)
• CVE-2025-4414 — WordPress CMSMasters Content Composer plugin < 2.5.7 - Local File Inclusion vulnerability (CVSS 8.1)
• CVE-2024-7963 — CMSMasters Content Composer <= 1.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4)