CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It affects WordPress.
CVE
CVE-2021-24215
Severity
CRITICAL
CVSS
9.8
EPSS
9.73%
WordPress
Original NVD Description
An Improper Access Control vulnerability was discovered in the Controlled Admin Access WordPress plugin before 1.5.2. Uncontrolled access to the website customization functionality and global CMS settings, like /wp-admin/customization.php and /wp-admin/options.php, can lead to a complete compromise of the target resource.
Related CVEs
Other vulnerabilities affecting the same vendor(s)