octagonwebstudio
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Premium Addons for KingComposer | 2 | – | Jun 30, 2026 |
Exploited and recent CVEs
- CVE-2026-12349 Premium Addons for KingComposer <= 1.1.1 - Missing Authorization to Unauthenticated Arbitrary Custom Sidebar Creation and Deletion via 'add_custom_sidebar' and 'remove_custom_sidebar' AJAX actions 0.4%
- CVE-2025-49036 WordPress Premium Addons for KingComposer Plugin <= 1.1.1 - Local File Inclusion Vulnerability 0.6%