CVE-2021-24859

The CVE-2021-24859 entry concerns the WordPress plugin “User Meta Shortcodes” (versions ≤ 0.5). Multiple connected sources confirm that a shortcode registered by the plugin allows any user with a role as low as Contributor to access metadata of other users by supplying the login parameter, enabli...