CVE-2021-24845

MEDIUM 6.5CVE-2021-24845 · Published 13/12/2021 · updated 17/06/2026

In short

CVE-2021-24845 is a MEDIUM (CVSS 6.5) vulnerability affecting improved include page (improved include page project).
Chance of exploitation in the next 30 days (EPSS): 1.0%, higher than 63.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
improved include page improved_include_page_project	`≤ 1.2`	No fix yet

Description

The Improved Include Page WordPress plugin through 1.2 allows passing shortcode attributes with post_type & post_status which can be used to retrieve arbitrary content. This way, users with a role as low as Contributor can gain access to content they are not supposed to.

References

wpscan.com/vulnerability/ab857454-7c7c-454d-9c7f-1db767961e5f · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free