Wpexpertplugins - vulnerabilities (CVEs)

5 CVEs in 1 products, 0 in the last 30 days, newest from 2025-03-08.

Products

CVE-2024-13835 - CVSS 7.2 (high), 2025-03-08: The Post Meta Data Manager plugin for WordPress is vulnerable to multisite privilege escalation in all versions up to, and including, 1.4.4. This is due to…
CVE-2024-6264 - CVSS 6.4 (medium), 2024-07-02: The Post Meta Data Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘$meta_key’ parameter in all versions up to, and…
CVE-2023-5776 - CVSS 8.8 (high), 2023-11-21: The Post Meta Data Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.1. This is due to…
CVE-2023-5426 - CVSS 7.5 (high), 2023-10-28: The Post Meta Data Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the…
CVE-2023-5425 - CVSS 8.8 (high), 2023-10-28: The Post Meta Data Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the…