Description
The Swape theme before 1.2.1 for WordPress has incorrect access control, as demonstrated by allowing new administrator accounts via vectors involving xmlPath to wp-admin/admin-ajax.php.
Unscored
CVE-2018-21013
EUVD-2018-13537GHSA-37m6-2cm3-x5m2
The Swape theme before 1.2.1 for WordPress has incorrect access control, as demonstrated by allowing new administrator accounts via vectors…
Published Sep 9, 2019 · Updated Aug 5, 2024 · Assigned by mitre