CVE-2021-24289

CVE-2021-24289: Store Locator Plus <= 5.5.14 - Authenticated Privilege Escalation

Vendor Store Locator Plus
Product Store Locator Plus for WordPress
Weakness CWE-269
Published May 17, 2021
Last update August 3, 2024

CVSS base score

What the vulnerability does

01Description

There is functionality in the Store Locator Plus for WordPress plugin through 5.5.14 that made it possible for authenticated users to update their user meta data to become an administrator on any site using the plugin.

Key dates

02Disclosure timeline

May 17, 2021 CVE published
August 3, 2024 Record updated