CVE-2021-24215

CVE-2021-24215: Controlled Admin Access < 1.5.2 - Improper Access Control & Privilege Escalation

Vendor Unknown

Product Controlled Admin Access

Weakness CWE-284

Published April 12, 2021

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

An Improper Access Control vulnerability was discovered in the Controlled Admin Access WordPress plugin before 1.5.2. Uncontrolled access to the website customization functionality and global CMS settings, like /wp-admin/customization.php and /wp-admin/options.php, can lead to a complete compromise of the target resource.

Key dates

02Disclosure timeline

April 12, 2021 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2021-24215 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/284.html