Known vulnerabilities in Page Builder: KingComposer - Free Drag and Drop page builder by King-Theme

Vendor: King-Theme
Software CPE: cpe:2.3:a:kingthemes:kingcomposer:*:*:*:*:*:wordpress:*:*
Total vulnerabilities: 9
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Page Builder: KingComposer - Free Drag and Drop page builder by King-Theme Page Builder: KingComposer - Free Drag and Drop page builder by King-Theme is affected by 9 known vulnerabilities: 6 medium, 3 low Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU29637 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-15299
CWE-79 Low
No
No
2.9.5 10.07.2020 SB2020071005
#VU29191 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-22 Medium
No
No
2.9.4 22.06.2020 SB2020062209
#VU29190 - Improper Control of Generation of Code ('Code Injection')
CWE-94 Medium
No
No
2.9.4 22.06.2020 SB2020062209
#VU29189 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
2.9.4 22.06.2020 SB2020062209
#VU29188 - Improper Access Control
CWE-284 Medium
No
No
2.9.4 22.06.2020 SB2020062209
#VU29187 - Improper Access Control
CWE-284 Medium
No
No
2.9.4 22.06.2020 SB2020062209
#VU29186 - Improper Access Control
CWE-284 Medium
No
No
2.9.4 22.06.2020 SB2020062209
#VU20542 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
2.8.1 02.09.2019 SB2019020511
#VU18397 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Medium
No
No
2.8.2 06.05.2019 SB2019050617