CVE-2020-36700

The CVE-2020-36700 entry concerns the WordPress Page Builder: KingComposer plugin. Affected component: KingComposer Page Builder for WordPress (versions up to and including 2.9.3). Root cause: an authorization bypass due to a security nonce being leaked on /wp-admin/index.php. Impact: authenticat...

CVE-2020-36709

Summary (CVE-2020-36709) : The WordPress plugin Page Builder: KingComposer is affected by a stored cross-site scripting vulnerability in versions prior to 2.9.4, caused by insufficient input sanitization and output escaping in the KingComposer shortcode. Authenticated attackers could inject arbit...