Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-24289

Store Locator Plus <= 5.5.14 - Authenticated Privilege Escalation

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

There is functionality in the Store Locator Plus for WordPress plugin through 5.5.14 that made it possible for authenticated users to update their user meta data to become an administrator on any site using the plugin.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Store Locator Plus Store Locator Plus for WordPress

  • 5.5.14 to ≤ 5.5.14affected

References