PT-2022-7044 · WordPress · Page Builder Kingcomposer

Name of the Vulnerable Software and Affected Versions: Page Builder KingComposer WordPress plugin versions 2.9.6 and earlier Description: The issue is related to the use of open redirection when handling the kc get thumbn parameter in the admin-ajax.php script of the Page Builder KingComposer...