CVE-2021-24244

An AJAX action registered by the WPBakery Page Builder (Visual Composer) Clipboard WordPress plugin before 4.5.8 did not have capability checks, allowing low privilege users, such as subscribers, to update the license options (key, email).
Configurations

Configuration 1 (hide)

cpe:2.3:a:wpbakery_page_builder_clipboard_project:wpbakery_page_builder_clipboard:*:*:*:*:*:wordpress:*:*

History

No history.

Information

Published : 2021-05-06 13:15

Updated : 2024-02-28 18:28


NVD link : CVE-2021-24244

Mitre link : CVE-2021-24244

CVE.ORG link : CVE-2021-24244


JSON object : View

Products Affected

wpbakery_page_builder_clipboard_project

  • wpbakery_page_builder_clipboard
CWE
CWE-863

Incorrect Authorization