Wpexpertplugins Post Meta Data Manager
5 CVEs affecting Wpexpertplugins Post Meta Data Manager. Latest disclosed: 2025-03-08. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-5425 | High | 8.8 | 2023-10-28 | The Post Meta Data Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the pmdm_wp_change_user… |
CVE-2023-5426 | High | 7.5 | 2023-10-28 | The Post Meta Data Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the pmdm_wp_delete_user… |
CVE-2024-13835 | High | 7.2 | 2025-03-08 | The Post Meta Data Manager plugin for WordPress is vulnerable to multisite privilege escalation in all versions up to, and including, 1.4.4. This is due to the… |
CVE-2024-6264 | Medium | 6.4 | 2024-07-02 | The Post Meta Data Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘$meta_key’ parameter in all versions up to, and including… |
CVE-2023-5776 | Medium | 4.3 | 2023-11-21 | The Post Meta Data Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.1. This is due to missing… |