CVE-2021-24244
WPBakery Page Builder Clipboard < 4.5.8 - Unauthorised Arbitrary License Options Update
MEDIUM 6.5EPSS 0.9%
An AJAX action registered by the WPBakery Page Builder (Visual Composer) Clipboard WordPress plugin before 4.5.8 did not have capability checks, allowing low privilege users, such as subscribers, to update the license options (key, email).
- Affected
- bitorbit · WPBakery Page Builder (Visual Composer) Clipboard
- CVSS v3.1 NVD
- 6.5 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N - CVSS v2.0 NVD
- 4.0 MEDIUM
AV:N/AC:L/Au:S/C:N/I:P/A:N - EPSS
- 0.94% chance of exploitation in the next 30 days, 60th percentile
- Published
- 2021-05-05
- Updated
- 2024-08-03