WordPress Post Meta Data Manager Plugin <= 1.2.0 is vulnerable to Broken Access Control

🗓️ 27 Oct 2023 00:00:00Reported by Francesco CarlucciType

WordPress Post Meta Data Manager Plugin <= 1.2.0 is vulnerable to Broken Access Control. Mitigate or resolve the vulnerability immediately

Reporter	Title	Published	Views	Family All 6
Prion	Design/Logic Flaw	28 Oct 202312:15	–	prion
Cvelist	CVE-2023-5426	28 Oct 202311:06	–	cvelist
CVE	CVE-2023-5426	28 Oct 202312:15	–	cve
NVD	CVE-2023-5426	28 Oct 202312:15	–	nvd
WPVulnDB	Post Meta Data Manager < 1.2.1 - Unauthenticated Data Deletion	3 Nov 202300:00	–	wpvulndb
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (October 23, 2023 to October 29, 2023)	2 Nov 202318:40	–	wordfence

Vulners

Node

wpexpertplugins post_meta_data_managerRange≤1.2.0wordpress

Source	Link
wordpress	www.wordpress.org/plugins/post-meta-data-manager/
cve	www.cve.org/CVERecord
wordfence	www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/post-meta-data-manager/post-meta-data-manager-120-missing-authorization-to-user-term-and-post-meta-deletion

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

27 Oct 2023 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS37.5

EPSS0.001