Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-24244

WPBakery Page Builder Clipboard < 4.5.8 - Unauthorised Arbitrary License Options Update

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

An AJAX action registered by the WPBakery Page Builder (Visual Composer) Clipboard WordPress plugin before 4.5.8 did not have capability checks, allowing low privilege users, such as subscribers, to update the license options (key, email).

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

bitorbit WPBakery Page Builder (Visual Composer) Clipboard

  • 4.5.0 to < 4.5.0*affected
  • 4.5.8 to < 4.5.8affected

References