Skip to content
OpenAdvisories
Unscored CVE-2021-24289 EUVD-2021-11203GHSA-m38j-h682-h2cp

Store Locator Plus <= 5.5.14 - Authenticated Privilege Escalation

Published May 17, 2021 · Updated Aug 3, 2024 · Assigned by WPScan

Description

There is functionality in the Store Locator Plus for WordPress plugin through 5.5.14 that made it possible for authenticated users to update their user meta data to become an administrator on any site using the plugin.

Affected products

VendorProductAffectedFixed
Store Locator Plus Store Locator Plus for WordPress 5.5.14 – ≤ 5.5.14 —

References