WordPress security by component

Premium Addons for KingComposer

Plugin description

Premium Addons for KingComposer is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Jun 30, 2026; the highest CVE/CNA score is 8.1.

Plugin slug: premium-addons-for-kingcomposer

Latest vulnerability

CVE-2026-12349: Premium Addons for KingComposer: A security weakness

Premium Addons for KingComposer is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is <= 1.1.1.

PublishedJun 30, 2026

Known safe version> 1.1.1

		Safe version
Jun 30, 2026	CVE-2026-12349 Premium Addons for KingComposer: A security weakness Premium Addons for KingComposer is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is <= 1.1.1.	> 1.1.1	CVE5.3 NVDPending
Aug 14, 2025	CVE-2025-49036 Premium Addons for KingComposer: Filesystem traversal Premium Addons for KingComposer is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.	See mitigation notes	CVE8.1 NVDPending