CVE-2021-24207

By default, the WP Page Builder WordPress plugin before 1.2.4 allows subscriber-level users to edit and make changes to any and all posts pages - user roles must be specifically blocked from editing posts and pages.

Affected products

Wp Page Builder

Themeum Wp Page Builder

< 1.2.4

Fix

Available

CVSS 3.1

4.3 MEDIUM

EPSS

0.7% (49th percentile)

Weakness

CWE-269, CWE-863

NVD status

Modified

Published

2021-04-05