Login Request a demo
KI
Product
Kingcomposer
by King-theme · last CVE Apr 4, 2022
4
CVEs
0
On KEV
6.1
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 0High 0Medium 4Low 0
Severity
All severities4Critical0High0Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Kingcomposer to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-0165
6.1
4%
Mar 14
The Page Builder KingComposer WordPress plugin through 2.9.6 does not validate the id parameter before redirecting the user to it via the kc_get_thumbn AJAX action available to…
Affected: through 2.9.6
CVE-2020-15299
6.1
47%
Jul 9
A reflected Cross-Site Scripting (XSS) Vulnerability in the KingComposer plugin through 2.9.4 for WordPress allows remote attackers to trick a victim into submitting an…
Affected: through 2.9.4
CVE-2019-9910
6.1
1%
Mar 21
The kingcomposer plugin 2.7.6 for WordPress has wp-admin/admin.php?page=kc-mapper id XSS
Affected: 2.7.6
CVE-2021-25048
5.4
1%
Apr 4
The KingComposer WordPress plugin through 2.9.6 does not have authorisation, CSRF and sanitisation/escaping when creating profile, allowing any authenticated users to create…
Affected: through 2.9.6
Showing 4