WordPress Plugin Vulnerabilities

Post Meta Data Manager < 1.2.1 - Subscriber+ Privilege Escalation

Description

The plugin does not properly implement capability checks on certain functions, which results in potential unauthorized modification of data. As a result, authenticated users with subscriber-level permissions can potentially gain elevated privileges.

Affects Plugins

References

Classification

Type
NO AUTHORISATION
CWE
CVSS

Miscellaneous

Original Researcher
Francesco Carlucci
Verified
No

Timeline

Publicly Published
2023-10-27 (about 6 months ago)
Added
2023-11-03 (about 6 months ago)
Last Updated
2023-11-03 (about 6 months ago)

Other