The Bulk Datetime Change WordPress plugin before 1.12 does not enforce capability checks which allows users with Contributor roles to 1) list private post titles of other users and 2) change the posted date of other users' posts.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: WPScan
Published: 2021-11-29T08:25:40
Updated: 2024-08-03T19:42:17.397Z
Reserved: 2021-01-14T00:00:00
Link: CVE-2021-24842
Vulnrichment
No data.
NVD
Status : Modified
Published: 2021-11-29T09:15:07.583
Modified: 2024-11-21T05:53:52.253
Link: CVE-2021-24842
Redhat
No data.