PT-2022-11675 · Unknown · Beaver Themer

Jacob Hill · Published 2022-01-07 · Updated 2022-01-14 · CVE-2021-42749

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Beaver Themer (affected versions not specified)

Description The issue allows attackers to bypass conditional logic controls for hiding content when viewing post archives. This can be exploited if a Themer layout is applied to the archives and the post excerpt field is not set.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Exposure of Resource to Wrong Sphere

Weakness Enumeration

CWE-668

Related Identifiers

CVE-2021-42749

Affected Products

Beaver Themer

References · 3

• 🔥 https://tekfused.com/tek/vulnerability-research/beaver-builder-vulnerabilities-visibility-conditional-logic-cve · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-42749 · Security Note
• https://docs.wpbeaverbuilder.com/beaver-builder/developer/conditionally-hidden-content · Vendor Advisory