wpexpertplugins records

5 published records for vendor wpexpertplugins.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

5 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
35Monitor	CVE-2023-5425No exploit	Post Meta Data Manager <=1.2.0 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalationwpexpertplugins · post meta data manager · CWE-862 Broken access control (IDOR)	High8.8	—	0.5%	Oct 28, 2023
35Monitor	CVE-2023-5776No exploit	Post Meta Data Manager <= 1.2.1 - Cross-Site Request Forgery to Post, Term, and User Meta Deletionwpexpertplugins · post meta data manager · CWE-352 Pre-auth CSRF	High8.8	—	0.3%	Nov 21, 2023
30Monitor	CVE-2023-5426No exploit	Post Meta Data Manager <=1.2.0 - Missing Authorization to User, Term, and Post Meta Deletionwpexpertplugins · post meta data manager · CWE-862 Pre-auth Broken access control (IDOR)	High7.5	—	0.5%	Oct 28, 2023
28Monitor	CVE-2024-13835No exploit	Post Meta Data Manager <= 1.4.4 - Authentciated (Admin+) Multisite Privilege Escalationwpexpertplugins · post meta data manager · CWE-269	High7.2	—	0.4%	Mar 7, 2025
21Monitor	CVE-2024-6264No exploit	Post Meta Data Manager <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scriptingwpexpertplugins · post meta data manager · CWE-79 XSS	Medium5.4	—	0.3%	Jul 2, 2024

CVE-2023-5425
35Monitor
Post Meta Data Manager <=1.2.0 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
HighCVSS 8.8No exploitEPSS 1%
- Broken access control (IDOR)
wpexpertplugins · post meta data managerOct 28, 2023
CVE-2023-5776
35Monitor
Post Meta Data Manager <= 1.2.1 - Cross-Site Request Forgery to Post, Term, and User Meta Deletion
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
wpexpertplugins · post meta data managerNov 21, 2023
CVE-2023-5426
30Monitor
Post Meta Data Manager <=1.2.0 - Missing Authorization to User, Term, and Post Meta Deletion
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
wpexpertplugins · post meta data managerOct 28, 2023
CVE-2024-13835
28Monitor
Post Meta Data Manager <= 1.4.4 - Authentciated (Admin+) Multisite Privilege Escalation
HighCVSS 7.2No exploitEPSS 0%
wpexpertplugins · post meta data managerMar 7, 2025
CVE-2024-6264
21Monitor
Post Meta Data Manager <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
MediumCVSS 5.4No exploitEPSS 0%
- XSS
wpexpertplugins · post meta data managerJul 2, 2024