CVE-2021-24158

Katalog CVE

CVSS 6.5 · Medium EPSS 0,90%

Kerentanan Improper Privilege Management pada themeisle orbit fox. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

Orbit Fox by ThemeIsle has a feature to add a registration form to both the Elementor and Beaver Builder page builders functionality. As part of the registration form, administrators can choose which role to set as the default for users upon registration. This field is hidden from view for lower-level users, however, they can still supply the user_role parameter to update the default role for registration.

Rincian

Terbit di NVD

5 April 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-269: Improper Privilege Management

EPSS (30 hari)

0,90% peluang dieksploitasi; lebih tinggi dari 58,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://wpscan.com/vulnerability/d81d0e72-9bb5-47ef-a796-3b305a4b604f exploit · advisory pihak ketiga
• https://www.wordfence.com/blog/2021/01/multiple-vulnerabilities-patched-in-orbit-fox-by-themeisle-plugin/ exploit · advisory pihak ketiga