Medium severity6.5NVD Advisory· Published Nov 1, 2021· Updated Jun 17, 2026
CVE-2021-24770
CVE-2021-24770
Description
The Stylish Price List WordPress plugin before 6.9.1 does not perform capability checks in its spl_upload_ser_img AJAX action (available to authenticated users), which could allow any authenticated users, such as subscriber, to upload arbitrary images.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- WordPress/Stylish Price Listdescription
- Range: <6.9.1
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/4365c813-4bd7-4c7c-a15b-ef9a42d32b26nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.