CVE-2020-36700

The Page Builder: KingComposer plugin for WordPress is vulnerable to authorization bypass in versions up to, and including, 2.9.3. This is due to a security nonce being leaked in the '/wp-admin/index.php' page. This makes it possible for authenticated attackers to change arbitrary WordPress options, delete arbitrary files/folders, and inject arbitrary content.

• CWE-284

• https://blog.nintechnet.com/wordpress-kingcomposer-page-builder-fixed-multiple-critical-vulnerabilities/Exploit
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2320014%40kingcomposer&new=2320014%40kingcomposer&sfp_email=&sfph_mail=Patch
• https://wordpress.org/plugins/kingcomposer/#developersProduct
• https://www.wordfence.com/threat-intel/vulnerabilities/id/1bdba04e-df4d-4094-877e-611d69e2e25d?source=cveThird Party Advisory
• https://blog.nintechnet.com/wordpress-kingcomposer-page-builder-fixed-multiple-critical-vulnerabilities/Exploit
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2320014%40kingcomposer&new=2320014%40kingcomposer&sfp_email=&sfph_mail=Patch
• https://wordpress.org/plugins/kingcomposer/#developersProduct
• https://www.wordfence.com/threat-intel/vulnerabilities/id/1bdba04e-df4d-4094-877e-611d69e2e25d?source=cveThird Party Advisory

Published

Jun 7, 2023

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-36695Incorrect Default Permissions vulnerability in Hitachi Devic…7.8
• CVE-2020-36696The Product Input Fields for WooCommerce plugin for WordPres…7.5
• CVE-2020-36697The WP GDPR plugin for WordPress is vulnerable to authorizat…6.5
• CVE-2020-36698The Security & Malware scan by CleanTalk plugin for WordPres…8.8
• CVE-2020-36699The Quick Page/Post Redirect Plugin for WordPress is vulnera…4.3
• CVE-2020-3670u'Potential out of bounds read while processing downlink NAS…9.1
• CVE-2020-36701The Page Builder: KingComposer plugin for WordPress is vulne…8.8
• CVE-2020-36702The Ultimate Addons for Gutenberg plugin for WordPress is vu…4.3
• CVE-2020-36703The Elementor Website Builder plugin for WordPress is vulner…5.4
• CVE-2020-36704The Fruitful Theme for WordPress is vulnerable to Stored Cro…5.4
• CVE-2020-36705The Adning Advertising plugin for WordPress is vulnerable to…9.8
• CVE-2020-36706The Simple:Press – WordPress Forum Plugin for WordPress is v…9.8