Lucene search
HistoryMar 25, 2024 - 5:15 a.m.
CVE-2024-1564
wordpress
plugin
security
access
custom fields
shortcode
The wp-schema-pro WordPress plugin before 2.7.16 does not validate post access allowing a contributor user to access custom fields on any post regardless of post type or status via a shortcode
Related
wpvulndb
wpvulndb
Schema Pro < 2.7.16 - Contributor+ Custom Field Access
2024-03-04 00:00:00
cve
cve
CVE-2024-1564
2024-03-25 05:15:50
cvelist
cvelist
CVE-2024-1564 Schema Pro < 2.7.16 - Contributor+ Custom Field Access
2024-03-25 05:00:01
wpexploit
wpexploit
Schema Pro < 2.7.16 - Contributor+ Custom Field Access
2024-03-04 00:00:00
wordfence
wordfence