Beaver Builder – WordPress Page Builder, 6f9f112d22d6247361adbc54889598859312939e
- CVE, Research URL
- Application
- Published on
- Feb 08, 2016
- Research Description
- Beaver Builder Page Builder – Drag and Drop Website Builder [beaver-builder-lite-version] < 1.7.1 Beaver Builder – WordPress Page Builder (Free & Pro) <= 1.7 - Authorization Bypass The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to authorization bypass in versions up to, and including, 1.7 due to bypass in how the capability checking functionality works in the call_action() function. An attacker is able to supply '0' for the 'post_id' parameter which makes the check that a current user can edit the supplied post ID true. This makes it possible for authenticated attackers, with minimal permissions like a subscriber, to call any of the 40+ AJAX action available and perform many unauthorized actions.
- Affected versions
-
max 1.7.1.
- Status
-
vulnerable