VULNERABILITY INTELLIGENCE

CVE-2021-24289

CVSS score8.8 HIGH
EPSS probability1.15%
CISA KEVNot currently listed
Published2021-05-17
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

There is functionality in the Store Locator Plus for WordPress plugin through 5.5.14 that made it possible for authenticated users to update their user meta data to become an administrator on any site using the plugin.

Weakness classification

  • contact@wpscan.com: CWE-269

Primary references