CVE-2021-37598

MEDIUM NUCLEI

WP Cerber < 8.9.3 - Unauthenticated Access Control Bypass via Trailing ? Character

Title source: llm

CVE-2021-37598 has a Nuclei detection template available — see the Nuclei card below for the Shodan/FOFA recon queries.

WP Cerber before 8.9.3 allows bypass of /wp-json access control via a trailing ? character.

WP Cerber < 8.9.3 - Broken Access Control

MEDIUMby theamanrawat

Core 2

Core References

Third Party Advisory x_refsource_misc

Exploit, Third Party Advisory x_refsource_misc

CVSS v3 5.3

EPSS 0.0237

EPSS Percentile 81.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE

CWE-863

Status published

Products (1)

wpcerber/wp_cerber < 8.9.3

Published Aug 19, 2021

Tracked Since Feb 18, 2026