Post Meta Data Manager (Wpexpertplugins) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 20 known versions, newest CVE from 2025-03-08. Vendor: Wpexpertplugins.

CVEs of Post Meta Data Manager

• CVE-2024-13835 - CVSS 7.2 (high), 2025-03-08: The Post Meta Data Manager plugin for WordPress is vulnerable to multisite privilege escalation in all versions up to, and including, 1.4.4. This is due to…
• CVE-2024-6264 - CVSS 6.4 (medium), 2024-07-02: The Post Meta Data Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘$meta_key’ parameter in all versions up to, and…
• CVE-2023-5776 - CVSS 8.8 (high), 2023-11-21: The Post Meta Data Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.1. This is due to…
• CVE-2023-5426 - CVSS 7.5 (high), 2023-10-28: The Post Meta Data Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the…
• CVE-2023-5425 - CVSS 8.8 (high), 2023-10-28: The Post Meta Data Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the…