Security Advisory

CVE-2018-21013

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-09-09 12:07:11

Last updated 2024-08-05 12:19:27

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The Swape theme before 1.2.1 for WordPress has incorrect access control, as demonstrated by allowing new administrator accounts via vectors involving xmlPath to wp-admin/admin-ajax.php.

← Browse all CVEs View on cve.org ↗