title: Controlled Admin Access < 1.5.2 - Improper Access Control & Privilege Escalation
description: An Improper Access Control vulnerability was discovered in the Controlled Admin Access WordPress plugin before 1.5.2. Uncontrolled access to the website customization functionality and global CMS settings, like /wp-admin/customization.php and /wp-admin/options.php, can lead to a complete compromise of the target resource.
problem types: CWE-284 Improper Access Control
affected:
{
product: Controlled Admin Access
vendor: Unknown
versions:
lessThan: 1.5.2, status: affected, version: 1.5.2, versionType: custom
}