CVE-2020-36700
EUVD-2020-2414207.06.2023, 02:15
The Page Builder: KingComposer plugin for WordPress is vulnerable to authorization bypass in versions up to, and including, 2.9.3. This is due to a security nonce being leaked in the '/wp-admin/index.php' page. This makes it possible for authenticated attackers to change arbitrary WordPress options, delete arbitrary files/folders, and inject arbitrary content.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| king-theme | page_builder_kingcomposer | 𝑥 ≤ 2.9.3 |
𝑥
= Vulnerable software versions
References