Lucene search
GoogleOSV:CVE-2021-24872HistoryDec 13, 2021 - 11:15 a.m.
CVE-2021-24872
2021-12-1311:15:09
Google
osv.dev
5
wordpress
plugin vulnerability
unauthorized access
The Get Custom Field Values WordPress plugin before 4.0 allows users with a role as low as Contributor to access other posts metadata without validating the permissions. Eg. contributors can access admin posts metadata.
Related
cvelist
cvelist
cnvd
cnvd
WordPress Get Custom Field Values plugin access control error vulnerability
2021-12-18 00:00:00
cve
cve
CVE-2021-24872
2021-12-13 11:15:09
prion
prion
Design/Logic Flaw
2021-12-13 11:15:00
patchstack
patchstack
wpvulndb
wpvulndb
Get Custom Field Values < 4.0 - Contributors+ Arbitrary Post Metadata Access
2021-11-09 00:00:00
nvd
nvd
CVE-2021-24872
2021-12-13 11:15:09
wpexploit
wpexploit
Get Custom Field Values < 4.0 - Contributors+ Arbitrary Post Metadata Access
2021-11-09 00:00:00