CVE-2021-24215

Controlled Admin Access < 1.5.2 - Improper Access Control & Privilege Escalation

State: Published
Severity: Not scored
Published: Apr 12, 2021
Updated: Aug 3, 2024
Reserved: Jan 14, 2021

Description

An Improper Access Control vulnerability was discovered in the Controlled Admin Access WordPress plugin before 1.5.2. Uncontrolled access to the website customization functionality and global CMS settings, like /wp-admin/customization.php and /wp-admin/options.php, can lead to a complete compromise of the target resource.

Scores

The record has no CVSS score.

Weaknesses

CWE-284 Improper Access Control

Affected Products

Product	Versions
Controlled Admin AccessUnknown	1.5.2 to before 1.5.2Affected

References

https://wpscan.com/vulnerability/eec0f29f-a985-4285-8eed-d1855d204a20
https://m0ze.ru/vulnerability/%5B2021-03-18%5D-%5BWordPress%5D-%5BCWE-284%5D-Controlled-Admin-Access-WordPress-Plugin-v1.4.0.txt

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.