Vendor

    King-Theme

    10 known vulnerabilities in products by King-Theme, 0 of them actively exploited (CISA KEV).

    Key figures

    10

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in King-Theme
    MediumCVE-2020-15299

    KingComposer: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2022-0165

    Page Builder KingComposer <= 2.9.6 - Open Redirect

    		6.1
    HighCVE-2026-15323

    King-Theme Product Designer for WooCommerce WordPress | Lumise: Path Traversal

    		7.5
    HighCVE-2020-36701

    Page Builder: KingComposer < 2.9.4 - Arbitrary File Upload

    also in 1 other product

    		8.8
    HighCVE-2020-36700

    Page Builder: KingComposer < 2.9.4 - Authorization Bypass due to Improper Access Control

    also in 1 other product

    		8.8
    MediumCVE-2019-9910

    KingComposer: Cross-Site Scripting (XSS)

    		6.1
    HighCVE-2026-9713

    King-Theme Product Designer for WooCommerce WordPress | Lumise: SQL Injection

    		7.5
    CriticalCVE-2026-25371

    WordPress Lumise Product Designer plugin < 2.0.9 - SQL Injection vulnerability

    		9.3
    MediumCVE-2020-36709

    Page Builder: KingComposer < 2.9.4 - Stored Cross-Site Scripting

    also in 1 other product

    		5.5
    MediumCVE-2021-25048

    KingComposer <= 2.9.6 - Subscriber+ Stored Cross-Site Scripting

    		5.4

    Products

    Products by King-Theme
    Page Builder40