Lucene search
WpvulndbWPVDB-ID:E5233164-A197-4413-A9B0-F43C9D9A1506HistoryNov 03, 2023 - 12:00 a.m.
Post Meta Data Manager < 1.2.1 - Unauthenticated Data Deletion
2023-11-0300:00:00
wpscan.com
5
plugin
capability checks
unauthorized modification
data deletion
unauthenticated users
Description The plugin does not perform proper capability checks on certain functions, leading to potential unauthorized modification of data. This could result in unauthenticated users being able to delete user, term, and post meta.
Related
cvelist
cvelist
CVE-2023-5426
2023-10-28 11:06:03
prion
prion
Design/Logic Flaw
2023-10-28 12:15:00
cve
cve
CVE-2023-5426
2023-10-28 12:15:38
nvd
nvd
CVE-2023-5426
2023-10-28 12:15:38
wordfence
wordfence
AI Score
7
Confidence
Low
EPSS
0.001
Percentile
34.0%
Related for WPVDB-ID:E5233164-A197-4413-A9B0-F43C9D9A1506