Wpruby Controlled Admin Access — known CVE vulnerabilities

Every CVE whose affected-product data names Wpruby Controlled Admin Access, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2021-4360 — CVSS 9.9 (critical): The Controlled Admin Access plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 1.5.5 by not…
• CVE-2021-24215 — CVSS 9.8 (critical): An Improper Access Control vulnerability was discovered in the Controlled Admin Access WordPress plugin before 1.5.2. Uncontrolled access…