Unauthorized Data Modification in Post Meta Data Manager Plugin for WordPress

CVE-2023-5425

Summary

The Post Meta Data Manager plugin for WordPress is vulnerable to unauthorized data modifications due to insufficient capability checks on specific functions. This allows authenticated users, even those with minimal permissions, to manipulate user and post metadata, potentially escalating their privileges to that of an administrator. The vulnerability impacts versions of the plugin prior to 1.2.0, highlighting the necessity for users to update and secure their installations.

References