Vulnerability · Published Jun 7, 2023 · Assigned by Wordfence
CVE-2020-36701Page Builder: KingComposer < 2.9.4 - Arbitrary File Upload
High 8.8
In plain English
A high-severity unrestricted file upload in Page Builder: KingComposer – Free Drag and Drop page builder by King-Theme from kingthemes. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.5% (higher than 75% of all known vulnerabilities).
Official description
The Page Builder: KingComposer plugin for WordPress is vulnerable to Arbitrary File Uploads in versions up to, and including, 2.9.3 via the 'process_bulk_action' function in the 'kingcomposer/includes/kc.extensions.php' file. This makes it possible for authenticated users with author level permissions and above to upload arbitrary files onto the server which can be used to execute code on the server.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| kingthemes | Page Builder: KingComposer – Free Drag and Drop page builder by King-Theme | 0 – through 2.9.3 |
Weakness: CWE-434 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
- https://www.wordfence.com/threat-intel/vulnerabilities/id/45a62dd0-386c-41b3-b8dd-ced443da9f92?source=cve
- https://blog.nintechnet.com/wordpress-kingcomposer-page-builder-fixed-multiple-critical-vulnerabilities/
- https://wordpress.org/plugins/kingcomposer/#developers
- https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2320014%40kingcomposer&new=2320014%40kingcomposer&sfp_email=&sfph_mail=