CVE-2021-24244CWE-863

WPBakery Page Builder Clipboard < 4.5.8 - Unauthorised Arbitrary License Options Update

published May 5, 2021

CVSS
—
EPSS
1%
Percentile
60.5
In the wild
Unconfirmed
What it is

An AJAX action registered by the WPBakery Page Builder (Visual Composer) Clipboard WordPress plugin before 4.5.8 did not have capability checks, allowing low privilege users, such as subscribers, to update the license options (key, email).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00938 · 60.5th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2021-05-05T18:39Z
EPSS history
Timeline
  • 05 MAY 18:39Z
    WPBakery Page Builder Clipboard < 4.5.8 - Unauthorised Arbitrary License Options Update
    cvelistv5