CVE-2021-24781

Image Source Control < 2.3.1 - Contributor+ Arbitrary Post Meta Value Change

State: Published
Severity: Not scored
Published: Nov 1, 2021
Updated: Aug 3, 2024
Reserved: Jan 14, 2021

Description

The Image Source Control WordPress plugin before 2.3.1 allows users with a role as low as Contributor to change arbitrary post meta fields of arbitrary posts (even those they should not be able to edit)

Scores

The record has no CVSS score.

Weaknesses

CWE-284 Improper Access Control

Affected Products

Product	Versions
Image Source ControlUnknown	2.3.1 to before 2.3.1Affected

References

https://wpscan.com/vulnerability/3550ba54-7786-4ad9-aeb1-1c0750f189d0
https://plugins.trac.wordpress.org/changeset/2606615/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.