CVE-2021-37598

MEDIUM NUCLEI

Wpcerber WP Cerber < 8.9.3 - Incorrect Authorization

Title source: rule

Description

WP Cerber before 8.9.3 allows bypass of /wp-json access control via a trailing ? character.

Nuclei Templates (1)

WP Cerber < 8.9.3 - Broken Access Control
MEDIUMby theamanrawat

References (2)

Scores

CVSS v3 5.3
EPSS 0.0568
EPSS Percentile 90.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Details

CWE
CWE-863
Status published
Products (1)
wpcerber/wp_cerber < 8.9.3
Published Aug 19, 2021
Tracked Since Feb 18, 2026