CVE-2024-37218 – WordPress Page Builder Sandwich <= 5.1.0 - Broken Access Control vulnerability

https://notcve.org/view.php?id=CVE-2024-37218

Missing Authorization vulnerability in WordPress Page Builder Sandwich Team Page Builder Sandwich – Front-End Page Builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Page Builder Sandwich – Front-End Page Builder: from n/a through 5.1.0. The Page Builder Sandwich – Front End WordPress Page Builder Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 5.1.0. This makes it possible for authenticated attackers, with Contributor-level access and above, to perform an unauthorized action. • https://patchstack.com/database/vulnerability/page-builder-sandwich/wordpress-page-builder-sandwich-5-1-0-broken-access-control-vulnerability?_s_id=cve • CWE-862: Missing Authorization •