Skip to content
OpenAdvisories

Product · techeshta

Layouts for WPBakery

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.5

    Layouts for WPBakery <= 1.1.3 - Missing Authorization to Unauthenticated Template Cache Manipulation via 'handle_sync' AJAX Action

    The Layouts for WPBakery plugin for WordPress is vulnerable to unauthorized actions due to a missing capability check on the `Layouts_WPB_Remote::template_sync()` callback registered via `wp_ajax_nopriv_handle_sync` in all versions up to, and including, 1.1.3…