King-theme vulnerabilities

Products

• Kingcomposer 4
• Lumise Product Designer 2
• Page Builder Kingcomposer 2
• Product Designer For Woocommerce Wordpress | Lumise 2

Newest

• king-theme product designer for woocommerce wordpress | lumise Product Designer for WooCommerce WordPress | Lumise <= 2.1.2 - Unauthenticated Arbitrary File Read via 'design.stages[*].image' Parameter in Cart JSON Upload CVE-2026-15323 7.5 HighOctober 28, 2026
• king-theme lumise product designer, lumise product designer +1 more WordPress Lumise Product Designer plugin < 2.1.4.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-39726 7.1 HighOctober 6, 2026
• king-theme product designer for woocommerce wordpress | lumise Product Designer for WooCommerce WordPress | Lumise <= 2.1.1 - Unauthenticated SQL Injection via 'id' Parameter in Cart JSON Upload CVE-2026-9713 7.5 HighJuly 23, 2026
• king-theme lumise product designer WordPress Lumise Product Designer plugin < 2.0.9 - SQL Injection vulnerability CVE-2026-25371 9.3 CriticalMarch 25, 2026
• king-theme page builder kingcomposer, kingthemes page builder: kingcomposer – free drag and drop page builder by king-theme +1 more Page Builder: KingComposer < 2.9.4 - Stored Cross-Site Scripting CVE-2020-36709 5.5 MediumJune 7, 2023
• king-theme page builder king composer, kingthemes page builder: kingcomposer – free drag and drop page builder by king-theme +1 more Page Builder: KingComposer < 2.9.4 - Arbitrary File Upload CVE-2020-36701 8.8 HighJune 7, 2023
• king-theme page builder kingcomposer, kingthemes page builder: kingcomposer – free drag and drop page builder by king-theme +1 more Page Builder: KingComposer < 2.9.4 - Authorization Bypass due to Improper Access Control CVE-2020-36700 8.8 HighJune 7, 2023
• king-theme kingcomposer, unknown page builder: kingcomposer – free drag and drop page builder by king-theme +1 more KingComposer <= 2.9.6 - Subscriber+ Stored Cross-Site Scripting CVE-2021-25048 5.4 MediumApril 4, 2022
• king-theme kingcomposer, unknown page builder: kingcomposer – free drag and drop page builder by king-theme +1 more Page Builder KingComposer <= 2.9.6 - Open Redirect CVE-2022-0165 Public exploit 6.1 MediumMarch 14, 2022
• king-theme kingcomposer A reflected Cross-Site Scripting (XSS) Vulnerability in the KingComposer plugin through 2.9.4 for... CVE-2020-15299 EPSS 47.0% 6.1 MediumJuly 9, 2020
• king-theme kingcomposer The kingcomposer plugin 2.7.6 for WordPress has wp-admin/admin.php?page=kc-mapper id XSS. CVE-2019-9910 6.1 MediumMarch 21, 2019