Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-24207

WP Page Builder < 1.2.4 - Insecure default configuration Allows Subscribers Editing Access to Posts

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

By default, the WP Page Builder WordPress plugin before 1.2.4 allows subscriber-level users to edit and make changes to any and all posts pages - user roles must be specifically blocked from editing posts and pages.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown WP Page Builder

  • 1.2.4 to < 1.2.4affected

References