Vulnerabilities in octagonwebstudio

2 results

CVE-2025-49036HIGHWordPress Premium Addons for KingComposer Plugin <= 1.1.1 - Local File Inclusion VulnerabilityEPSS 0.4%CVE-2026-12349MEDIUMPremium Addons for KingComposer <= 1.1.1 - Missing Authorization to Unauthenticated Arbitrary Custom Sidebar Creation and Deletion via 'add_custom_sidebar' and 'remove_custom_sidebar' AJAX actionsEPSS 0.2%