WPBakery Page Builder Clipboard WordPress Plugin Missing Capability Checks Vulnerability

A vulnerability exists in the WPBakery Page Builder Clipboard WordPress plugin in versions prior to 4.5.8. An AJAX action registered by the plugin lacked proper capability checks, enabling low-privilege users, such as subscribers, to unauthorizedly update license options, including the license key and email.

Impact

Exploitation of this vulnerability allows low-privilege users to arbitrarily update license information, potentially leading to unauthorized access or privileges.

Reproduction

To reproduce this vulnerability, log in as a user with a subscriber role or higher. Send a request to 'wp-admin/admin-ajax.php' with the action 'vc_clipboard_activate'. Include arbitrary data in the 'email' and 'license_key' parameters. The absence of capability checks will allow the request to be processed, updating the license options with the provided data.

Remediation

Users are advised to update the WPBakery Page Builder Clipboard WordPress plugin to version 4.5.8 or later.