CVE-2021-24289

HOCH 8.8CVE-2021-24289 · Published 17/05/2021 · updated 17/06/2026

Kurz gesagt

CVE-2021-24289 ist eine Schwachstelle (HOCH (CVSS 8.8)) in store locator plus (de-baat).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 1.1%, höher als bei 67.0% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
store locator plus de-baat	`≤ 5.5.14`	No fix yet

Description

There is functionality in the Store Locator Plus for WordPress plugin through 5.5.14 that made it possible for authenticated users to update their user meta data to become an administrator on any site using the plugin.

References

wpscan.com/vulnerability/078e93cd-7cf2-4e23-8171-58d44e354d62 · Third Party Advisory
wordfence.com/blog/2021/04/severe-unpatched-vulnerabilities-leads-to-closure-of-store-locator-plus-plugin · Third Party Advisory

Weitere Schwachstellen in store locator plus

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free