| Package | Affected versions | Patched versions |
|---|---|---|
| kingcomposer | ≤ 2.9.6 |
The Page Builder KingComposer WordPress plugin through 2.9.6 does not validate the id parameter before redirecting the user to it via the kc_get_thumbn AJAX action available to both unauthenticated and authenticated users
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free