CVE-2021-24781

The Image Source Control WordPress plugin before 2.3.1 allows users with a role as low as Contributor to change arbitrary post meta fields of arbitrary posts (even those they should not be able to edit)

CVSS v3.1

4.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

CVSS v2.0

4.0 MEDIUMAV:N/AC:L/Au:S/C:N/I:P/A:N

EPSS

0.79% chance of exploitation in the next 30 days, 54th percentile

Published

2021-11-01

Updated

2024-08-03

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/3550ba54-7786-4ad9-aeb1-1c0750f189d0

References

• CVE Record
• NVD entry

Related

• CVE-2021-24780
• CVE-2021-24782
• CVE-2021-24779
• CVE-2021-24783
• CVE-2021-24778
• CVE-2021-24784