Visual Composer has had some updates to fix several XSS vulnerabilities. This plugin is on millions of websites, either by itself or baked into themes. Envato has an update on how they’re handling it, but many of you probably already got an email from them.