AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2021-24162

HIGH · CVSS 8.8 EPSS 0.80%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2021-04-05 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2021-24162
Severity
HIGH
CVSS
8.8
EPSS
0.80%
WordPress Java

Original NVD Description

In the Reponsive Menu (free and Pro) WordPress plugins before 4.0.4, attackers could craft a request and trick an administrator into importing all new settings. These settings could be modified to include malicious JavaScript, therefore allowing an attacker to inject payloads that could aid in further infection of the site.