medium5.3
CVE-2021-42748
In Beaver Builder through 2.5.0.3, attackers can bypass the visibility controls protection mechanism via the REST API.
Impact
In Beaver Builder through 2.5.0.3, attackers can bypass the visibility controls protection mechanism via the REST API.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fastlinemedia | Beaver Builder | before 2.5.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://docs.wpbeaverbuilder.com/beaver-builder/developer/conditionally-hidden-content/
- https://tekfused.com/tek/vulnerability-research/beaver-builder-vulnerabilities-visibility-conditional-logic-cve/
- https://docs.wpbeaverbuilder.com/beaver-builder/developer/conditionally-hidden-content/
- https://tekfused.com/tek/vulnerability-research/beaver-builder-vulnerabilities-visibility-conditional-logic-cve/