CVE-2021-42748

Description

In Beaver Builder through 2.5.0.3, attackers can bypass the visibility controls protection mechanism via the REST API.

Affected Platforms

Weakness Type

CWE-425

References

• https://docs.wpbeaverbuilder.com/beaver-builder/developer/conditionally-hidden-c…
• https://tekfused.com/tek/vulnerability-research/beaver-builder-vulnerabilities-v…
• https://docs.wpbeaverbuilder.com/beaver-builder/developer/conditionally-hidden-c…
• https://tekfused.com/tek/vulnerability-research/beaver-builder-vulnerabilities-v…