CVE-2021-42748: Medium severity fastlinemedia beaver builder wordpress vulnerability
Published Jan 7, 2022
·Updated
In Beaver Builder through 2.5.0.3, attackers can bypass the visibility controls protection mechanism via the REST API.
Affected Software
2 affected components
Fastlinemedia Beaver Builder Wordpress<2.5.1
Fastlinemedia Beaver Builder Wordpress<2.5.1
Remediation
Event History
Jan 7, 2022
CVE Published
via MITRE·06:10 PM
Data Sourced
via MITRE·06:10 PM
Description
Jan 10, 2022
Data Sourced
via NVD·02:10 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2021-42748?
CVE-2021-42748 has been classified as a medium severity vulnerability.
2
How do I fix CVE-2021-42748?
To fix CVE-2021-42748, update Beaver Builder to version 2.5.1 or later.
3
What systems are affected by CVE-2021-42748?
CVE-2021-42748 affects Beaver Builder versions up to 2.5.0.3 including both Lite and Professional editions.
4
What does CVE-2021-42748 exploit?
CVE-2021-42748 allows attackers to bypass visibility controls via the REST API.
5
When was CVE-2021-42748 disclosed?
CVE-2021-42748 was disclosed on November 25, 2021.