CVE-2021-24207CWE-863

WP Page Builder < 1.2.4 - Insecure default configuration Allows Subscribers Editing Access to Posts

published April 5, 2021

CVSS
—
EPSS
1%
Percentile
52.2
In the wild
Unconfirmed
What it is

By default, the WP Page Builder WordPress plugin before 1.2.4 allows subscriber-level users to edit and make changes to any and all posts pages - user roles must be specifically blocked from editing posts and pages.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00689 · 52.2th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2021-04-05T18:27Z
EPSS history
Timeline
  • 05 APR 18:27Z
    WP Page Builder < 1.2.4 - Insecure default configuration Allows Subscribers Editing Access to Posts
    cvelistv5