CVE-2021-24289CWE-269

Store Locator Plus <= 5.5.14 - Authenticated Privilege Escalation

published May 17, 2021

CVSS
—
EPSS
1%
Percentile
66.6
In the wild
Unconfirmed
What it is

There is functionality in the Store Locator Plus for WordPress plugin through 5.5.14 that made it possible for authenticated users to update their user meta data to become an administrator on any site using the plugin.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01149 · 66.6th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2021-05-17T16:48Z
EPSS history
Timeline
  • 17 MAY 16:48Z
    Store Locator Plus <= 5.5.14 - Authenticated Privilege Escalation
    cvelistv5