VULNERABILITY INTELLIGENCE

CVE-2021-24966

CVSS score4.9 MEDIUM
EPSS probability5.19%
CISA KEVNot currently listed
Published2022-03-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Description

The Error Log Viewer WordPress plugin through 1.1.1 does not validate the path of the log file to clear, allowing high privilege users to clear arbitrary files on the web server, including those outside of the blog folder

Weakness classification

  • contact@wpscan.com: CWE-73

Primary references