C
Vendor security profile
composer
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs16
Critical0
CISA KEV0
Public exploit0
Patch rate—
Avg. CVSS—
12-month vulnerability rate
CVE KEV
CVE severity distribution
16toplam CVE
Uncertain16 (100%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
16Unknown
Latest vulnerabilities
9.8
CVE-2026-12227Visual Composer Website Builder <= 45.16.0 - Unauthenticated Local File Inclusion via 'vcv-template' Parameter
Patch status unknown Public Exploits:5EPSS %3
6.1
CVE-2026-59944Composer: CVE-2026-59946 fix bypass via symlinked package bin path
Patch status unknownEPSS %0
7.7
CVE-2026-84361Composer: Perforce source URL permits P4PORT `rsh:` command execution
Patch verifiedEPSS %1