King-theme Kingcomposer — known CVE vulnerabilities

Every CVE whose affected-product data names King-theme Kingcomposer, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2019-9910 — CVSS 6.1 (medium): The kingcomposer plugin 2.7.6 for WordPress has wp-admin/admin.php?page=kc-mapper id XSS.
• CVE-2020-15299 — CVSS 6.1 (medium): A reflected Cross-Site Scripting (XSS) Vulnerability in the KingComposer plugin through 2.9.4 for WordPress allows remote attackers to…
• CVE-2022-0165 — CVSS 6.1 (medium): The Page Builder KingComposer WordPress plugin through 2.9.6 does not validate the id parameter before redirecting the user to it via the…
• CVE-2021-25048 — CVSS 5.4 (medium): The KingComposer WordPress plugin through 2.9.6 does not have authorisation, CSRF and sanitisation/escaping when creating profile, allowing…