{"id":"CVE-2021-24244","url":"https://www.cyber-defence.io/tools/cve/CVE-2021-24244","generatedAt":"2026-10-28T02:59:10.862Z","title":"An AJAX action registered by the WPBakery Page Builder (Visual Composer) Clipboard WordPress plugin before 4.5.8 did not have capability checks, allowing low privilege users, such as subscribers, to update the license options (key, email).","description":"An AJAX action registered by the WPBakery Page Builder (Visual Composer) Clipboard WordPress plugin before 4.5.8 did not have capability checks, allowing low privilege users, such as subscribers, to update the license options (key, email).","published":"2021-05-06T13:15:11.000Z","lastModified":"2026-06-17T03:39:42.000Z","status":"Modified","sourceIdentifier":"contact@wpscan.com","cvss":{"version":"3.1","score":6.5,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N"},"cwe":["CWE-863"],"affected":["wpbakery page builder clipboard project/wpbakery page builder clipboard"],"epss":{"score":0.00938,"percentile":0.60643,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.94%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://codecanyon.net/item/visual-composer-clipboard/8897711","tags":["Product","Third Party Advisory"],"source":"contact@wpscan.com"},{"url":"https://wpscan.com/vulnerability/354b98d8-46a1-4189-b347-198701ea59b9","tags":["Exploit","Third Party Advisory"],"source":"contact@wpscan.com"},{"url":"https://codecanyon.net/item/visual-composer-clipboard/8897711","tags":["Product","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://wpscan.com/vulnerability/354b98d8-46a1-4189-b347-198701ea59b9","tags":["Exploit","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2021-24244","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}