Read the docs

King-Theme

Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

King-Theme records in CISA KEV

No King-Theme vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Page Builder King Composer · all components

Priority MEDIUM 43

The Page Builder: KingComposer plugin for WordPress is vulnerable to Arbitrary File Uploads in versions up to, and including, 2.9.3 via the 'process_bulk_action' function in the 'kingcomposer/includes/kc.extensions.php'…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01518 Published 2023-06-07 No fix listed CWE-434
Open these records in search →