KI
Vendor
King-theme
9
CVEs
0
On KEV
1
New 30D
Products
PD7.5
Product Designer for WooCommerce WordPress | Lumise
King-Theme
2 CVEs0 on KEV1 new
KI6.1
Kingcomposer
King-theme
4 CVEs0 on KEV0 new
PB8.8
Page Builder Kingcomposer
King-theme
2 CVEs0 on KEV0 new
PB8.8
Page Builder King Composer
King-theme
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-15323 New | PD Product Designer for WooCommerce WordPress | Lumise King-Theme | 7.5 | Oct 28 | Product Designer for WooCommerce WordPress | Lumise <= 2.1.2 - Unauthenticated Arbitrary File Read via 'design.stages[*].image' Parameter in Cart JSON Upload |
| CVE-2026-9713 | PD Product Designer for WooCommerce WordPress | Lumise King-Theme | 7.5 | Jul 23 | Product Designer for WooCommerce WordPress | Lumise <= 2.1.1 - Unauthenticated SQL Injection via 'id' Parameter in Cart JSON Upload |
| CVE-2020-36709 | PB Page Builder Kingcomposer King-theme | 4.8 | Jun 7 | The Page Builder: KingComposer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via via shortcode in versions before 2.9.4 due to insufficient input sanitization… |
| CVE-2020-36701 | PB Page Builder King Composer King-theme | 8.8 | Jun 7 | The Page Builder: KingComposer plugin for WordPress is vulnerable to Arbitrary File Uploads in versions up to, and including, 2.9.3 via the 'process_bulk_action' function in the… |
| CVE-2020-36700 | PB Page Builder Kingcomposer King-theme | 8.8 | Jun 7 | The Page Builder: KingComposer plugin for WordPress is vulnerable to authorization bypass in versions up to, and including, 2.9.3 |
| CVE-2021-25048 | KI Kingcomposer King-theme | 5.4 | Apr 4 | The KingComposer WordPress plugin through 2.9.6 does not have authorisation, CSRF and sanitisation/escaping when creating profile, allowing any authenticated users to create… |
| CVE-2022-0165 | KI Kingcomposer King-theme | 6.1 | Mar 14 | The Page Builder KingComposer WordPress plugin through 2.9.6 does not validate the id parameter before redirecting the user to it via the kc_get_thumbn AJAX action available to… |
| CVE-2020-15299 | KI Kingcomposer King-theme | 6.1 | Jul 9 | A reflected Cross-Site Scripting (XSS) Vulnerability in the KingComposer plugin through 2.9.4 for WordPress allows remote attackers to trick a victim into submitting an… |
| CVE-2019-9910 | KI Kingcomposer King-theme | 6.1 | Mar 21 | The kingcomposer plugin 2.7.6 for WordPress has wp-admin/admin.php?page=kc-mapper id XSS |