Design/Logic Flaw

2019-09-0913:15:00

PRIOn knowledge base

www.prio-n.com

9.2 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

75.4%

JSON

The Swape theme before 1.2.1 for WordPress has incorrect access control, as demonstrated by allowing new administrator accounts via vectors involving xmlPath to wp-admin/admin-ajax.php.

CPENameOperatorVersion
swapelt1.2.1

CPE	Name	Operator	Version
	swape	lt	1.2.1

References

wpvulndb.com/vulnerabilities/9024