{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2021-24175/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2021-24175/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2021-24175/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2021-24175/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2021-24175/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2021-24175"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2021-24175"
    }
  },
  "data": {
    "nuclei": true,
    "nuclei_template": "http/cves/2021/CVE-2021-24175.yaml",
    "nuclei_template_severity": "critical",
    "nuclei_template_yaml": "id: CVE-2021-24175\n\ninfo:\n  name: The Plus Addons for Elementor Page Builder < 4.1.7 - Authentication Bypass\n  author: pussycat0x\n  severity: critical\n  description: |\n    The Plus Addons for Elementor plugin (before version 4.1.7) allowed attackers to bypass authentication, gain admin access, and create accounts with elevated roles, even when registration was disabled and the Login widget was inactive.\n  impact: |\n    Unauthenticated attackers can bypass authentication, gain administrator access, and create elevated privilege accounts even when registration is disabled, leading to complete WordPress site takeover.\n  remediation: Fixed in 4.1.7\n  reference:\n    - https://wpscan.com/vulnerability/c311feef-7041-4c21-9525-132b9bd32f89/\n    - https://www.wordfence.com/blog/2021/03/critical-0-day-in-the-plus-addons-for-elementor-allows-site-takeover/\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n    cvss-score: 9.8\n    cve-id: CVE-2021-24175\n    cwe-id: CWE-287\n    epss-score: 0.17177\n    epss-percentile: 0.97102\n    cpe: cpe:2.3:a:posimyth:the_plus_addons_for_elementor:*:*:*:*:*:wordpress:*:*\n  metadata:\n    verified: true\n    max-request: 1\n    fofa-query: body=\"/wp-content/plugins/the-plus-addons-for-elementor-page-builder/\"\n    vendor: posimyth\n    product: the_plus_addons_for_elementor\n    framework: wordpress\n  tags: cve,cve2021,wordpress,wp-theme,wpscan,elementor,plus-addons,passive,vkev,vuln\n\nhttp:\n  - method: GET\n    path:\n      - \"{{BaseURL}}/wp-content/plugins/the-plus-addons-for-elementor-page-builder/readme.txt\"\n\n    matchers:\n      - type: dsl\n        dsl:\n          - \"status_code == 200\"\n          - \"contains(body, 'The Plus Addons for Elementor')\"\n          - \"compare_versions(version, '< 4.1.7')\"\n        condition: and\n\n    extractors:\n      - type: regex\n        part: body\n        group: 1\n        name: version\n        regex:\n          - 'Stable tag: ([0-9.]+)'\n        internal: true\n# digest: 4a0a00473045022100b7b2910d5ef49f8a57bd461e977963808fad577688d030a927bf2de55c454f2502206a2b284aa4bc4b73aed3f6870d74439828f9b56db807aa3312d063122fa61b91:922c64590222798bb761d5b6d8e72950"
  },
  "source": "nuclei",
  "vuln_id": "cve-2021-24175"
}