Lucene search
K

6 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 7:20 p.m.6 views

CVE-2021-24215

An Improper Access Control vulnerability was discovered in the Controlled Admin Access WordPress plugin before 1.5.2. Uncontrolled access to the website customization functionality and global CMS settings, like /wp-admin/customization.php and /wp-admin/options.php, can lead to a complete compromi...

10CVSS6.7AI score0.09733EPSS
Exploits2References1
CVE
CVE
added 2022/03/21 9:5 p.m.81 views

CVE-2022-27333

The CVE-2022-27333 issue affects idcCMS v1.10, where an attacker can arbitrarily delete the install.lock file, causing a reset of CMS settings and data. The vulnerability is described consistently across multiple sources as a deletion of install.lock, with no publicly detailed exploit chain beyon...

7.5CVSS7.5AI score0.00784EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2022/03/21 12:0 a.m.3 views

Net Titanium Technology idcCMS 安全漏洞

Net Titanium Technology idcCMS Net Titanium IDC Cloud Management Agent System is a cloud management agent system from the Chinese company Net Titanium Technology. A security vulnerability exists in Net Titanium Technology idcCMS v1.10 that allows an attacker to arbitrarily delete the install.lock...

7.5CVSS7.4AI score0.00784EPSS
Exploits1References2
Cvelist
Cvelist
added 2021/04/12 2:0 p.m.12 views

CVE-2021-24215 Controlled Admin Access < 1.5.2 - Improper Access Control & Privilege Escalation

An Improper Access Control vulnerability was discovered in the Controlled Admin Access WordPress plugin before 1.5.2. Uncontrolled access to the website customization functionality and global CMS settings, like /wp-admin/customization.php and /wp-admin/options.php, can lead to a complete compromi...

9.6AI score0.09733EPSS
Exploits2References2
CVE
CVE
added 2021/04/12 2:0 p.m.75 views

CVE-2021-24215

CVE-2021-24215 affects the Controlled Admin Access WordPress plugin (before 1.5.2). It is an improper access control vulnerability allowing unauthenticated attackers to access website customization and global CMS settings (e.g., /wp-admin/customization.php and /wp-admin/options.php), potentially ...

10CVSS9.4AI score0.09733EPSS
Exploits2References2Affected Software1
wpexploit
wpexploit
added 2021/03/23 12:0 a.m.146 views

Controlled Admin Access < 1.5.2 - Improper Access Control & Privilege Escalation

An Improper Access Control vulnerability was discovered in the plugin. Uncontrolled access to the website customization functionality and global CMS settings, like /wp-admin/customization.php and /wp-admin/options.php, can lead to a complete compromise of the target resource. Even with the maximu...

10CVSS1.5AI score0.09733EPSS
Exploits2References1
Rows per page
Query Builder