vulnerability
WordPress Plugin: store-locator-le: CVE-2021-24289: Improper Privilege Management
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:N/AC:L/Au:S/C:P/I:P/A:P) | Apr 26, 2021 | May 15, 2025 | Jun 24, 2025 |
Severity
7
CVSS
(AV:N/AC:L/Au:S/C:P/I:P/A:P)
Published
Apr 26, 2021
Added
May 15, 2025
Modified
Jun 24, 2025
Description
There is functionality in the Store Locator Plus for WordPress plugin through 5.5.15 that made it possible for authenticated users to update their user meta data to become an administrator on any site using the plugin.
Solution
store-locator-le-plugin-cve-2021-24289
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.