← WordPress Vulnerabilities
WordPress security by component

Controlled Admin Access

Controlled Admin Access is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Jun 07, 2023; the highest CVE/CNA score is 9.9.

Plugin slug: controlled-admin-access

CVE-2021-4360: Controlled Admin Access: Privilege escalation or authentication bypass

Controlled Admin Access is affected by privilege escalation or authentication bypass. Exposure depends on how the affected operation is made reachable by the site. A successful request can grant permissions or access that the caller should not possess.

PublishedJun 07, 2023
Safe version guidanceSee mitigation notes
Safe version
Jun 07, 2023 CVE-2021-4360
Controlled Admin Access: Privilege escalation or authentication bypass
Controlled Admin Access is affected by privilege escalation or authentication bypass. Exposure depends on how the affected operation is made reachable by the site. A successful request can grant permissions or access that the caller should not possess.
See mitigation notes
CVE9.9
NVD8.8
Apr 12, 2021 CVE-2021-24215
Controlled Admin Access: A security weakness
Controlled Admin Access is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE9.8
NVD9.8