As per similar instances with other PageBuilder plugins in recent months, a Cross-Site Scripting(CSS) vulnerability has been found on KingComposer, a WordPress PageBuilder plugin installed on over 100,000 sites.

This vulnerability has been fully patched in version 2.9.5 and so for users of this plugin, we strongly recommend updating to this version immediately.

For more information please check the official public release.

If you have questions, don’t hesitate to contact our support team.

People that read this article also liked

Critical Vulnerabilities Found on PageLayer Page Builder Plugin WordPress Websites Security Breach – Outbreak of Malicious File Attacks Outdated WPBakery Plugin Critical Security Risk to Millions of Sites WordPress 5.7 “Esperanza” + WooCommerce 5.1 Released