CVE-2021-37598

CVE-2021-37598 is a medium-severity broken access control vulnerability affecting WP Cerber versions prior to 8.9.3. It allows an unauthenticated attacker to bypass access restrictions to the /wp-json endpoint by appending a trailing '?' character to the request. The CVSS score of 5.3 reflects its network-based attack vector, low attack complexity, and potential for limited confidentiality impact. There is no evidence of active exploitation, and while Nuclei templates exist, no Metasploit modules or ExploitDB entries are available, indicating low current exploitation interest and community discussion.