High severity8.8NVD Advisory· Published May 17, 2021· Updated Jun 17, 2026
CVE-2021-24289
CVE-2021-24289
Description
There is functionality in the Store Locator Plus for WordPress plugin through 5.5.14 that made it possible for authenticated users to update their user meta data to become an administrator on any site using the plugin.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <=5.5.14
- Store Locator Plus/Store Locator Plus for WordPressv5Range: 5.5.14
Patches
Vulnerability mechanics
References
2- wpscan.com/vulnerability/078e93cd-7cf2-4e23-8171-58d44e354d62nvdThird Party Advisory
- www.wordfence.com/blog/2021/04/severe-unpatched-vulnerabilities-leads-to-closure-of-store-locator-plus-plugin/nvdThird Party Advisory
News mentions
0No linked articles in our index yet.