ID:9246 - Exploit for Permissions, Privileges, and Access Controls in WP User Avatar - CVE-2021-34621

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Exploits ID:9246 - Exploit for Permissions, Privileges, and Access Controls in WP User Avatar - CVE-2021-34621

ID:9246 - Exploit for Permissions, Privileges, and Access Controls in WP User Avatar - CVE-2021-34621

Published: August 14, 2023


Vulnerability identifier: #VU56051
Vulnerability risk: High
CVE-ID: CVE-2021-34621
CWE-ID: CWE-264
Exploitation vector: Remote access
Vulnerable software:
WP User Avatar

Link to public exploit:


Vulnerability description

The vulnerability allows a remote attacker to escalate privileges on the system.

The vulnerability exists due to application does not properly impose security restrictions during user registration, which leads to security restrictions bypass and privilege escalation.


Remediation

Install updates from vendor's website.