Description (CNA)
An AJAX action registered by the WPBakery Page Builder (Visual Composer) Clipboard WordPress plugin before 4.5.8 did not have capability checks, allowing low privilege users, such as subscribers, to update the license options (key, email).
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| bitorbit / WPBakery Page Builder (Visual Composer) Clipboard | affected 4.5.0 before 4.5.0*; affected 4.5.8 before 4.5.8 |
CWE
CWE-863
References
- https://codecanyon.net/item/visual-composer-clipboard/8897711
- https://wpscan.com/vulnerability/354b98d8-46a1-4189-b347-198701ea59b9
ADP enrichment
No English description supplied.