Blog

"Prevention is cheaper than a breach"

Live Vulnerability Intelligence

Threat Database

Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.

Total2
Critical0
High0
Medium2
Reset
Showing 1-2 of 2 records
Threat Entry Updated 2024-11-21

CVE-2021-24244 - Clipboard Plugin

An AJAX action registered by the WPBakery Page Builder (Visual Composer) Clipboard WordPress plugin before 4.5.8 did not have capability checks, allowing low privilege users, such as subscribers, to update the license options (key, email).

PLUGIN Clipboard

CVE-2021-24244

MEDIUM CVSS 6.5 2021-05-06
Threat Entry Updated 2024-11-21

CVE-2021-24243 - Clipboard Plugin

An AJAX action registered by the WPBakery Page Builder (Visual Composer) Clipboard WordPress plugin before 4.5.6 did not have capability checks nor sanitization, allowing low privilege users (subscriber+) to call it and set XSS payloads, which will be triggered in all backend pages.

PLUGIN Clipboard

CVE-2021-24243

MEDIUM CVSS 5.4 2021-05-06
Scroll to top