Approved changes feed: RSS · Atom

cpe:2.3:a:bitorbit:wpbakery_page_builder_(visual_composer)_clipboard:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBitorbit (bb9eca8b-4dbb-5f19-b694-d5a41ccd1c94)
ProductWpbakery Page Builder (Visual Composer) Clipboard (1591a336-49f7-5905-a461-c1d108d3d8dc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-24244 vulnerable 2026-06-08 05:30:04.046057 WPBakery Page Builder Clipboard < 4.5.8 - Unauthorised Arbitrary License Options Update
An AJAX action registered by the WPBakery Page Builder (Visual Composer) Clipboard WordPress plugin before 4.5.8 did not have capability checks, allowing low privilege users, such as subscribers, to update the license options (key, email).
Published: 2021-05-05T18:39:42.000Z
Updated: 2024-08-03T19:21:18.915Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-24243 vulnerable 2026-06-08 05:30:04.044890 WPBakery Page Builder Clipboard < 4.5.6 - Subscriber+ Stored Cross-Site Scripting (XSS)
An AJAX action registered by the WPBakery Page Builder (Visual Composer) Clipboard WordPress plugin before 4.5.6 did not have capability checks nor sanitization, allowing low privilege users (subscriber+) to call it and set XSS payloads, which will be triggered in all backend pages.
Published: 2021-05-05T18:39:42.000Z
Updated: 2024-08-03T19:21:18.708Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.