CVE-2021-24872 — Get Custom Field Values < 4.0 - Contributors+ Arbitrary Post Metadata Access
The Get Custom Field Values WordPress plugin before 4.0 allows users with a role as low as Contributor to access other posts metadata without validating the permissions. Eg. con…
Published: 2021-12-13 · CVSS: Unscored
The Get Custom Field Values WordPress plugin before 4.0 allows users with a role as low as Contributor to access other posts metadata without validating the permissions. Eg. contributors can access admin posts metadata.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7