CVE-2021-24840

MEDIO 5.3CVE-2021-24840 · Published 08/11/2021 · updated 17/06/2026

En resumen

CVE-2021-24840 es una vulnerabilidad MEDIO (CVSS 5.3) que afecta a squaretype (codesupply).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.2%, mayor que el 67.5% de las vulnerabilidades.
Solución: actualizar a 3.0.4 o posterior.

Package	Affected versions	Patched versions
squaretype codesupply	`< 3.0.4`	`3.0.4`

Description

The Squaretype WordPress theme before 3.0.4 allows unauthenticated users to manipulate the query_vars used to retrieve the posts to display in one of its REST endpoint, without any validation. As a result, private and scheduled posts could be retrieved via a crafted request.

References

wpscan.com/vulnerability/971302fd-4e8b-4c6a-818f-3a42c7fb83ef · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free