← WordPress Vulnerabilities
WordPress security by component

Page Builder: KingComposer

Page Builder: KingComposer is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Jun 07, 2023; the highest CVE/CNA score is 5.5.

Plugin slug: page-builder-kingcomposer

CVE-2020-36709: Page Builder: KingComposer: Cross-site scripting

Page Builder: KingComposer is affected by cross-site scripting. Exploitation requires an authenticated WordPress account. Injected script can execute in the affected site's origin when the vulnerable output is viewed.

PublishedJun 07, 2023
Safe version guidanceSee mitigation notes
Safe version
Jun 07, 2023 CVE-2020-36709
Page Builder: KingComposer: Cross-site scripting
Page Builder: KingComposer is affected by cross-site scripting. Exploitation requires an authenticated WordPress account. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE5.5
NVD4.8