An AJAX action registered by the WPBakery Page Builder (Visual Composer) Clipboard WordPress plugin before 4.5.8 did not have capability checks, allowing low privilege users, such as subscribers, to update the license options (key, email).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Vc Clipboard Plugin | — | Update vc-clipboard plugin to version 4.5.8, or a newer patched version | May 15, 2025 | Apr 6, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub