CVE-2018-21013

2019-09-0912:07:11

mitre

www.cve.org

9.3 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

75.4%

JSON

The Swape theme before 1.2.1 for WordPress has incorrect access control, as demonstrated by allowing new administrator accounts via vectors involving xmlPath to wp-admin/admin-ajax.php.

References

wpvulndb.com/vulnerabilities/9024