CVE-2021-24942

Menu Item Visibility Control <= 0.5 - Admin+ Arbitrary PHP Code Execution

High · published December 26, 2022

CVSS v3.1
7.2
EPSS
1%
Percentile
68.9
In the wild
Unconfirmed
What it is

The Menu Item Visibility Control WordPress plugin through 0.5 doesn't sanitize and validate the "Visibility logic" option for WordPress menu items, which could allow highly privileged users to execute arbitrary PHP code even in a hardened environment.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01238 · 68.9th percentile
Published
2022-12-26T12:28Z
EPSS history
Timeline
  • 26 DEC 12:28Z
    Menu Item Visibility Control <= 0.5 - Admin+ Arbitrary PHP Code Execution
    cvelistv5