title: WPBakery Page Builder Clipboard < 4.5.8 - Unauthorised Arbitrary License Options Update
description: An AJAX action registered by the WPBakery Page Builder (Visual Composer) Clipboard WordPress plugin before 4.5.8 did not have capability checks, allowing low privilege users, such as subscribers, to update the license options (key, email).
problem types: CWE-863 Incorrect Authorization
affected:
{
product: WPBakery Page Builder (Visual Composer) Clipboard
vendor: bitorbit
versions:
lessThan: 4.5.0*, status: affected, version: 4.5.0, versionType: custom
lessThan: 4.5.8, status: affected, version: 4.5.8, versionType: custom
}