Known vulnerabilities in Page Builder: KingComposer - Free Drag and Drop page builder by King-Theme 2.1.3
Vendor:
King-Theme
Version:
2.1.3
Software CPE:
cpe:2.3:a:kingthemes:kingcomposer:*:*:*:*:*:wordpress:*:*
Total vulnerabilities:
7
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.7
Vulnerabilities by Severity
2.9.6
2.9.5
2.7.9
2.7.7
2.7.5
2.7
2.6.16
2.6.15
2.6.14
2.6.13
2.6.12
2.6.11
2.6.10.1
2.6.10
2.6.8
2.6
2.5.7
2.5.6
2.5.5
2.5.3
2.4.7
2.4.6
2.4.4
2.4.3
2.4.2
2.4
2.3.9.2
2.3.9
2.3.8
2.3.7
2.3.6
2.3.5
2.3.2
2.3.1
2.3
2.2.1
2.2.0.5
2.2.0.4
2.2.0.3
2.2.0.2
2.2
2.1.9
2.1.8
2.1.7
2.1.6
2.1.5
2.1.4
2.1.3
2.1.2
2.1.1
2.1.0
2.0.1
2.0.0
2.9.4
2.9.3
2.9.2
2.9
2.8.2
2.8.1
2.8
version 2.6
version 2.5
version 2.4.7
version 2.4.5
version 2.4.3
version 2.4.2
Vulnerabilities (7)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU29637 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-15299 |
CWE-79 | Low | 2.9.5 | 10.07.2020 |
SB2020071005 |
||
| #VU29191 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') |
CWE-22 | Medium | 2.9.4 | 22.06.2020 |
SB2020062209 |
||
| #VU29190 - Improper Control of Generation of Code ('Code Injection') |
CWE-94 | Medium | 2.9.4 | 22.06.2020 |
SB2020062209 |
||
| #VU29189 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
CWE-79 | Low | 2.9.4 | 22.06.2020 |
SB2020062209 |
||
| #VU29188 - Improper Access Control |
CWE-284 | Medium | 2.9.4 | 22.06.2020 |
SB2020062209 |
||
| #VU29187 - Improper Access Control |
CWE-284 | Medium | 2.9.4 | 22.06.2020 |
SB2020062209 |
||
| #VU29186 - Improper Access Control |
CWE-284 | Medium | 2.9.4 | 22.06.2020 |
SB2020062209 |