Advisories · Technology
octagonwebstudio Premium Addons for KingComposer.
Every CVE that names octagonwebstudio Premium Addons for KingComposer among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
Premium Addons for KingComposer <= 1.1.1 - Missing Authorization to Unauthenticated Arbitrary Custom Sidebar Creation and Deletion via 'add_custom_sidebar' and 'remove_custom_sidebar' AJAX actions
- octagonwebstudio Premium Addons for KingComposer
- Broken access control
- CVSS 8.1 High
WordPress Premium Addons for KingComposer Plugin <= 1.1.1 - Local File Inclusion Vulnerability
- octagonwebstudio Premium Addons for KingComposer
- File inclusion