← CVE Intelligence

CVE-2024-1204

Meta Box < 5.9.4 - Contributor+ Arbitrary Posts' Custom Field Disclosure PUBLISHED

Description (CNA)

The Meta Box WordPress plugin before 5.9.4 does not prevent users with at least the contributor role from access arbitrary custom fields assigned to other user's posts.

Affected (CNA)

Vendor / productVersions
Unknown / Meta Box affected 0 before 5.9.4

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.