Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-101992
HistoryDec 18, 2021 - 12:00 a.m.

WordPress User Meta Shortcodes plugin access control error vulnerability

2021-12-1800:00:00
China National Vulnerability Database
www.cnvd.org.cn
2

0.001 Low

EPSS

Percentile

24.8%

WordPress is the Wordpress Foundation’s set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress User Meta Shortcodes Plugin has an access control error vulnerability that stems from the plugin’s User Meta Shortcodes registered shortcodes not properly restricting access to resources from unauthorized roles. Any user with a role as low as Contributor accesses the metadata of other users by specifying the user login as a parameter. No detailed vulnerability details are currently available.

0.001 Low

EPSS

Percentile

24.8%