Ultimate Addons for Beaver Builder – Lite, 25740522f41a7142a283b2fe8910fa30c3aed32d

CVE, Research URL: 25740522f41a7142a283b2fe8910fa30c3aed32d
Home page URL: Security reports for Ultimate Addons for Beaver Builder – Lite
Application: Ultimate Addons for Beaver Builder – Lite
Published on: Jan 23, 2023
Research Description: Ultimate Addons for Beaver Builder – Lite [ultimate-addons-for-beaver-builder-lite] < 1.5.5 Ultimate Addons for Beaver Builder – Lite <= 1.5.4 - Missing Authorization The Ultimate Addons for Beaver Builder – Lite plugin for WordPress is vulnerable to Authorization Bypass in versions up to, and including, 1.5.4. This is due to missing capability on the reload_icons function. This makes it possible for authenticated attackers, with subscriber-level access to delete the '_uabb_enabled_icons' plugin option via this function.
Affected versions: max 1.5.5.
Status: vulnerable

Ultimate Addons for Beaver Builder &#8211; Lite, 25740522f41a7142a283b2fe8910fa30c3aed32d