King-Theme records
7 published records for vendor king-theme.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 14.3%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-284 Improper Access Control1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
7 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
38Monitor | CVE-2020-15299No exploit | A reflected Cross-Site Scripting (XSS) Vulnerability in the KingComposer plugin through 2.9.4 for WordPress allows remote attackers to trickking-theme · kingcomposer · CWE-79 | Medium6.1 | — | 47.0% | Jul 9, 2020 |
35Monitor | CVE-2020-36701No exploit | Page Builder: KingComposer < 2.9.4 - Arbitrary File Uploadking-theme · page builder king composer · CWE-434 | High8.8 | — | 1.5% | Jun 6, 2023 |
35Monitor | CVE-2020-36700No exploit | Page Builder: KingComposer < 2.9.4 - Authorization Bypass due to Improper Access Controlking-theme · page builder kingcomposer · CWE-284 | High8.8 | — | 1.2% | Jun 6, 2023 |
25Monitor | CVE-2022-0165Proof of concept | Page Builder KingComposer <= 2.9.6 - Open Redirectking-theme · kingcomposer · CWE-601 | Medium6.1 | — | 4.3% | Mar 14, 2022 |
24Monitor | CVE-2019-9910No exploit | The kingcomposer plugin 2.7.6 for WordPress has wp-admin/admin.php?page=kc-mapper id XSS.king-theme · kingcomposer · CWE-79 | Medium6.1 | — | 1.4% | Mar 21, 2019 |
21Monitor | CVE-2021-25048No exploit | KingComposer <= 2.9.6 - Subscriber+ Stored Cross-Site Scriptingking-theme · kingcomposer · CWE-79 | Medium5.4 | — | 0.6% | Apr 4, 2022 |
19Monitor | CVE-2020-36709No exploit | Page Builder: KingComposer < 2.9.4 - Stored Cross-Site Scriptingking-theme · page builder kingcomposer · CWE-79 | Medium4.8 | — | 0.6% | Jun 6, 2023 |
- CVE-2020-1529938Monitor
A reflected Cross-Site Scripting (XSS) Vulnerability in the KingComposer plugin through 2.9.4 for WordPress allows remote attackers to trick
MediumCVSS 6.1No exploitEPSS 47%king-theme · kingcomposerJul 9, 2020
- CVE-2020-3670135Monitor
Page Builder: KingComposer < 2.9.4 - Arbitrary File Upload
HighCVSS 8.8No exploitEPSS 2%king-theme · page builder king composerJun 6, 2023
- CVE-2020-3670035Monitor
Page Builder: KingComposer < 2.9.4 - Authorization Bypass due to Improper Access Control
HighCVSS 8.8No exploitEPSS 1%king-theme · page builder kingcomposerJun 6, 2023
- CVE-2022-016525Monitor
Page Builder KingComposer <= 2.9.6 - Open Redirect
MediumCVSS 6.1Proof of conceptEPSS 4%king-theme · kingcomposerMar 14, 2022
- CVE-2019-991024Monitor
The kingcomposer plugin 2.7.6 for WordPress has wp-admin/admin.php?page=kc-mapper id XSS.
MediumCVSS 6.1No exploitEPSS 1%king-theme · kingcomposerMar 21, 2019
- CVE-2021-2504821Monitor
KingComposer <= 2.9.6 - Subscriber+ Stored Cross-Site Scripting
MediumCVSS 5.4No exploitEPSS 1%king-theme · kingcomposerApr 4, 2022
- CVE-2020-3670919Monitor
Page Builder: KingComposer < 2.9.4 - Stored Cross-Site Scripting
MediumCVSS 4.8No exploitEPSS 1%king-theme · page builder kingcomposerJun 6, 2023