These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
The CVE-2026-106596 vulnerability affects the Visual Composer Website Builder plugin for WordPress, versions up to and including 45.16.3. This issue is related to a Missing Authorization vulnerability, which allows attackers to exploit incorrectly configured access control security levels. The vulnerability has a CVSS score of 5.3 and is classified as MEDIUM severity.
A Cross Site Scripting (XSS) vulnerability was found in Visual Composer Website Builder plugin versions up to 45.16.1. This issue allows contributors to inject malicious scripts.
CVE-2026-65568 is a medium-severity vulnerability (CVSS Score: 5) in Visual Composer Website Builder plugin versions <= 45.15.0. The vulnerability is due to broken access control, allowing contributors to perform unauthorized actions. Users of Visual Composer Website Builder plugin version 45.15.0 or earlier should assess and apply patches. AI-assisted PatchSiren debrief based on the supplied source corpus.