VULNERABILITY INTELLIGENCE

CVE-2021-24215

CVSS score9.8 CRITICAL
EPSS probability8.70%
CISA KEVNot currently listed
Published2021-04-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

An Improper Access Control vulnerability was discovered in the Controlled Admin Access WordPress plugin before 1.5.2. Uncontrolled access to the website customization functionality and global CMS settings, like /wp-admin/customization.php and /wp-admin/options.php, can lead to a complete compromise of the target resource.

Weakness classification

  • contact@wpscan.com: CWE-284
  • nvd@nist.gov: CWE-425

Primary references