WordPress is the Wordpress Foundation’s set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress User Meta Shortcodes Plugin has an access control error vulnerability that stems from the plugin’s User Meta Shortcodes registered shortcodes not properly restricting access to resources from unauthorized roles. Any user with a role as low as Contributor accesses the metadata of other users by specifying the user login as a parameter. No detailed vulnerability details are currently available.
CPE | Name | Operator | Version |
---|---|---|---|
wordpress user meta shortcodes plugin | le | 0.5 |