AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2021-24639

HIGH · CVSS 8.1 EPSS 0.91%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2021-09-20 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2021-24639
Severity
HIGH
CVSS
8.1
EPSS
0.91%
WordPress

Original NVD Description

The OMGF WordPress plugin before 4.5.4 does not enforce path validation, authorisation and CSRF checks in the omgf_ajax_empty_dir AJAX action, which allows any authenticated users to delete arbitrary files or folders on the server.