← CVE Intelligence

CVE-2021-24783

Post Expirator < 2.6.0 - Contributor+ Arbitrary Post Schedule Deletion PUBLISHED

Description (CNA)

The Post Expirator WordPress plugin before 2.6.0 does not have proper capability checks in place, which could allow users with a role as low as Contributor to schedule deletion of arbitrary posts.

Affected (CNA)

Vendor / productVersions
Unknown / Post Expirator: Automatically Unpublish WordPress Postsaffected 2.6.0 before 2.6.0

CWE

CWE-863

References

ADP enrichment

CVE

No English description supplied.