An AJAX action registered by the WPBakery Page Builder (Visual Composer) Clipboard WordPress plugin prior to 4.5.8 did not have capability checks, allowing low privilege users, such as subscribers, to update the license options (key, email).
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|