CVE-2021-24942

PoC —

CVSS 3.1

7.2 high

EPSS

1%p67

Published

Dec 26, 2022 (Dec 26, 2022)

Modified

Jun 17, 2026

Description

The Menu Item Visibility Control WordPress plugin through 0.5 doesn't sanitize and validate the "Visibility logic" option for WordPress menu items, which could allow highly privileged users to execute arbitrary PHP code even in a hardened environment.

Vendors: menu item visibility control project
Products: menu item visibility control
Ecosystems: WordPress
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news0 stories

No ingested article mentions this CVE yet.