CVE-2021-24942

Published: Dec 26, 2022Modified: Jun 17, 2026

7.2

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.2 / Impact: 5.9

Source: NVD

Description

The Menu Item Visibility Control WordPress plugin through 0.5 doesn't sanitize and validate the "Visibility logic" option for WordPress menu items, which could allow highly privileged users to execute arbitrary PHP code even in a hardened environment.

Affected (1)

Products: Menu Item Visibility Control Project: Menu Item Visibility Control

Menu Item Visibility Control Project

1 product

Menu Item Visibility Control

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Menu Item Visibility Control Project Menu Item Visibility Control	Up to 0.5

References (2)

https://wpscan.com/vulnerability/eaa28832-74c1-4cd5-9b0f-02338e23b418

Source: contact@wpscan.com

ExploitThird Party Advisory

https://wpscan.com/vulnerability/eaa28832-74c1-4cd5-9b0f-02338e23b418

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.