octagonwebstudio Premium Addons for KingComposer

• CVE-2026-12349 Medium 5.3 Premium Addons for KingComposer <= 1.1.1 - Missing Authorization to Unauthenticated Arbitrary Custom Sidebar Creation and Deletion via 'add_custom_sidebar' and 'remove_custom_sidebar' AJAX actions 0.4%
• CVE-2025-49036 High 8.1 WordPress Premium Addons for KingComposer Plugin <= 1.1.1 - Local File Inclusion Vulnerability 0.6%