CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in prasadkirpekar WP Meta and Date Remover wp-meta-and-date-remover allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Meta and Date Remover: from n/a through <= 2.3.0.
Explanation of Vulnerability in Simple Terms
WP Meta and Date Remover through version 2.3.0 fails to properly check user permissions before allowing modifications to post metadata and dates. An authenticated user with low privileges can alter or delete metadata and change publication dates on posts they should not have access to modify. This affects the integrity of post data across the site.
What an attacker can do
Modify or delete post metadata and change publication dates on posts without proper authorization.
Potential impact on your site
Post metadata and publication dates can be altered by users who should not have that capability, compromising content integrity.
Conditions required to exploit
Attacker must have a low-privilege authenticated account (e.g., subscriber or contributor role).
Key dates
External resources
Related vulnerabilities
