WordPress Plugin Inline Call To Action Builder Lite-Free Call To Action Layer for WordPress includes Backdoor Only if downloaded via the vendor website - CVE-2021-24867 - Vulnerability Database

WP Plugin Inline Call To Action Builder Lite

WordPress Plugin Inline Call To Action Builder Lite-Free Call To Action Layer for WordPress includes Backdoor Only if downloaded via the vendor website - CVE-2021-24867

Critical

Reference: CVE-2021-24867

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2021-24867

Title: WordPress Plugin Inline Call To Action Builder Lite-Free Call To Action Layer for WordPress includes Backdoor Only if downloaded via the vendor website

Overview:

WordPress Plugin Inline Call To Action Builder Lite-Free Call To Action Layer for WordPress only if downloaded via the vendor website contains suspicious code. Attackers can exploit this issue to perform a variety of actions. Successful attacks will compromise the affected application and possibly the webserver or computer. WordPress Plugin Inline Call To Action Builder Lite-Free Call To Action Layer for WordPress version 1.1.0 is vulnerable prior versions may also be affected.