medium5.3
CVE-2021-42749
In Beaver Themer, attackers can bypass conditional logic controls (for hiding content) when viewing the post archives.
Impact
In Beaver Themer, attackers can bypass conditional logic controls (for hiding content) when viewing the post archives. Exploitation requires that a Themer layout is applied to the archives, and that the post excerpt field is not set.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fastlinemedia | Beaver Themer | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://docs.wpbeaverbuilder.com/beaver-builder/developer/conditionally-hidden-content/
- https://tekfused.com/tek/vulnerability-research/beaver-builder-vulnerabilities-visibility-conditional-logic-cve/
- https://docs.wpbeaverbuilder.com/beaver-builder/developer/conditionally-hidden-content/
- https://tekfused.com/tek/vulnerability-research/beaver-builder-vulnerabilities-visibility-conditional-logic-cve/