CVE

CVE-2021-24997

6.5

CVSS

Description

The WP Guppy WordPress plugin before 1.3 does not have any authorisation in some of the REST API endpoints, allowing any user to call them and could lead to sensitive information disclosure, such as usernames and chats between users, as well as be able to send messages as an arbitrary user

Attack Vector

Privileges Req.

User Interaction

wp guppy

Updated Oct 24, 2026View on NVD →

S4E scanner

mediumProduct Based Web Vulnerabilities~10 seconds

CVE-2021-24997 Scanner

CVE-2021-24997 scanner - Information Disclosure vulnerability in WP Guppy plugin for Wordpress

Used 3.5k times · 3.4k assets checked · url

Scanner page →Run scanner

CVE history: wp guppy

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →