Page Builder Kingcomposer CVEs and Security Vulnerabilities

CVE-2020-36709

Page Builder: KingComposer < 2.9.4 - Stored Cross-Site Scripting

The Page Builder: KingComposer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via via shortcode in versions before 2.9.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

King-theme

Products

Page Builder Kingcomposer

CVE-2020-36700

Page Builder: KingComposer < 2.9.4 - Authorization Bypass due to Improper Access Control

The Page Builder: KingComposer plugin for WordPress is vulnerable to authorization bypass in versions up to, and including, 2.9.3. This is due to a security nonce being leaked in the '/wp-admin/index.php' page. This makes it possible for authenticated attackers to change arbitrary WordPress options, delete arbitrary files/folders, and inject arbitrary content.

CVSS 3.1 · 8.8 High EPSS 1.2% KEV · Not listed