critical9.8
CVE-2018-21013
The Swape theme before 1.2.1 for WordPress has incorrect access control, as demonstrated by allowing new administrator accounts via vectors involving xmlPath t…
Impact
The Swape theme before 1.2.1 for WordPress has incorrect access control, as demonstrated by allowing new administrator accounts via vectors involving xmlPath to wp-admin/admin-ajax.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Upperthemes | Swape | before 1.2.1 |