CVE-2024-1285

CVE-2024-1285 affects the Page Builder Sandwich – Front End WordPress Page Builder Plugin for WordPress. It permits unauthorized modification of data via a missing capability check in gambit_builder_save_content, affecting all versions up to 5.1.0. Attackers with subscriber+ privileges can insert...

WordPress Page Builder Sandwich – Front-End Page Builder Plugin <= 5.1.0 is vulnerable to Broken Access Control

Software Page Builder Sandwich – Front-End Page Builder Type Plugin Vulnerable versions = 5.1.0 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-1285 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID bc89ef57da60...