6.5
CVSSv3

CVE-2021-24244

Published: 06/05/2021 Updated: 13/05/2021
CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 356
Vector: AV:N/AC:L/Au:S/C:N/I:P/A:N

Vulnerability Summary

An AJAX action registered by the WPBakery Page Builder (Visual Composer) Clipboard WordPress plugin prior to 4.5.8 did not have capability checks, allowing low privilege users, such as subscribers, to update the license options (key, email).

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product