Sayenthemes Kaswara Modern Vc Addons

2 CVEs affecting Sayenthemes Kaswara Modern Vc Addons. Latest disclosed: 2024-10-16. Critical: 0, High: 1.

Top CVEs affecting Sayenthemes Kaswara Modern Vc Addons
CVESeverityScorePublishedSummary
CVE-2021-4448High7.32024-10-16The Kaswara Modern VC Addons plugin for WordPress is vulnerable to authorization bypass in versions up to, and including, 3.0.1 due to insufficient capability…
CVE-2021-242842021-05-14The Kaswara Modern VC Addons WordPress plugin through 3.0.1 allows unauthenticated arbitrary file upload via the 'uploadFontIcon' AJAX action. The supplied zip…