Headline

CVE-2020-36701: Page Builder: KingComposer – Free Drag and Drop page builder by King-Theme

The Page Builder: KingComposer plugin for WordPress is vulnerable to Arbitrary File Uploads in versions up to, and including, 2.9.3 via the ‘process_bulk_action’ function in the ‘kingcomposer/includes/kc.extensions.php’ file. This makes it possible for authenticated users with author level permissions and above to upload arbitrary files onto the server which can be used to execute code on the server.

1 year ago

CVE

Open in Source

#web #ios #google #wordpress #php #acer #auth

Details
Reviews
Development

This plugin has been closed as of February 2, 2022 and is not available for download. Reason: Security Issue.

The plugin is abandoned. No support, no solutions, no updates…

This is HORRIBLE. Stay away from this plugin at all cost. There’s absolutely no reason to have to work with this. Everything about this plugin is amateur.

I have tried to contact support team by website forum, by email and even taggig them but none of that works, you are basically on your own ! Also this will mess up your page speed grade on google heavily , just stop using this plugin and you will find a lot of improvement

KingComposer initially my favourite page builder. But later, KingComposer rarely update until so many error unfixed issues. Leave alone missing feature. I have dive deep in many page builders and found replacement: Zion Builder Beaver Builder Gutenberg (it will have Header/Footer builder when Wordpress 5.8 released) All above builder is fast & lightweight. Zion Builder is perfect replacement for KingComposer because like KC, Zion Builder have a lot of elements on free version. (I’m not recommend Elementor/Divi/Brizy because they are very slow to load. Oxygen Builder is too difficult)

King composer is the perfect page builder, but developers don’t update wordpress anymore, and that’s a real problem, in my case I have 10 sites made with King composer. I hope the team will make the updates, if not, I would have to switch to elementor.

KingComposer es un super constructor de temas, es muy confiable e intuitivo, no tengo la versión premium, pero la gratuita es formidable me permite hacer lo que sea y con ella he creado sitios web fabulosos durante más de 4 años. Diseñar con Kingcomposer es una de las mejores opciones que puedes usar para que cualquier sitio tenga un diseño increíble y que se adapte a cualquier plataforma

Read all 77 reviews

“Page Builder: KingComposer – Free Drag and Drop page builder by King-Theme” is open source software. The following people have contributed to this plugin.

Contributors