WordPress plugin
Premium Addons for KingComposer security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High1
- Medium1
- Low0
All Premium Addons for KingComposer vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.3 | Missing Authorization to Unauthenticated Arbitrary Custom Sidebar Creation and Deletion via 'add_custom_sidebar' and 'remove_custom_sidebar' AJAX actions ≤1.1.1No patch available | CVE-2026-12349 | |
| High8.1 | Unauthenticated Local File Inclusion ≤1.1.1No patch available | CVE-2025-49036 |
- Medium5.3Missing Authorization to Unauthenticated Arbitrary Custom Sidebar Creation and Deletion via 'add_custom_sidebar' and 'remove_custom_sidebar' AJAX actions
≤1.1.1No patch available
- High8.1Unauthenticated Local File Inclusion
≤1.1.1No patch available
Premium Addons for KingComposer: common questions
Does Premium Addons for KingComposer have known vulnerabilities?
Yes. VulnCrest Radar lists 2 known vulnerabilities in Premium Addons for KingComposer: 1 high, 1 medium. At least one is not fixed in the latest version.
How do I check which version of Premium Addons for KingComposer I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Premium Addons for KingComposer vulnerability?
CVE-2026-12349, published Jun 29, 2026: Premium Addons for KingComposer <= 1.1.1 - Missing Authorization to Unauthenticated Arbitrary Custom Sidebar Creation and Deletion via 'add_custom_sidebar' and 'remove_custom_sidebar' AJAX actions. Severity: Medium (CVSS 5.3).
Is any Premium Addons for KingComposer vulnerability listed in CISA KEV?
No. None of the known Premium Addons for KingComposer vulnerabilities is currently listed in the CISA KEV catalog.