4.3
Moyenne
CVE-2024-1564 The wp-schema-pro WordPress plugin before 2.7.16 does not validate post access allowing a contributor user to access…
Description
The wp-schema-pro WordPress plugin before 2.7.16 does not validate post access allowing a contributor user to access custom fields on any post regardless of post type or status via a shortcode
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| wp-schema-pro 2.7 | premières → < 2.7.16 | 2.7.16 |
| wpschema_pro 2.7 | premières → < 2.7.16 | 2.7.16 |