An Improper Access Control vulnerability was discovered in the Controlled Admin Access WordPress plugin before 1.5.2. Uncontrolled access to the website customization functionality and global CMS settings, like /wp-admin/customization.php and /wp-admin/options.php, can lead to a complete compromise of the target resource.
References
Configurations
History
30 Jul 2022, 12:37
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-425 |
Information
Published : 2021-04-12 14:15
Updated : 2024-02-04 21:47
NVD link : CVE-2021-24215
Mitre link : CVE-2021-24215
CVE.ORG link : CVE-2021-24215
JSON object : View
Products Affected
wpruby
- controlled_admin_access