CVEvulnerability
CVE-2021-24244
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2021-05-06
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-863
Description
An AJAX action registered by the WPBakery Page Builder (Visual Composer) Clipboard WordPress plugin before 4.5.8 did not have capability checks, allowing low privilege users, such as subscribers, to update the license options (key, email).
Affected configurations
• wpbakery page builder clipboard project wpbakery page builder clipboard (>= 4.5.0 < 4.5.8)
Related
Weakness · CWE (1)
- CWE-863 Incorrect Authorization weakness
References
- https://codecanyon.net/item/visual-composer-clipboard/8897711 Product, Third Party Advisory
- https://wpscan.com/vulnerability/354b98d8-46a1-4189-b347-198701ea59b9 Exploit, Third Party Advisory
- https://codecanyon.net/item/visual-composer-clipboard/8897711 Product, Third Party Advisory
- https://wpscan.com/vulnerability/354b98d8-46a1-4189-b347-198701ea59b9 Exploit, Third Party Advisory