Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Thomas Maier Image Source Control Lite – Show Image Credits and Captions.This issue affects Image Source Control Lite – Show Image Credits and C…
The Image Source Control WordPress plugin before 2.3.1 allows users with a role as low as Contributor to change arbitrary post meta fields of arbitrary posts (even those they should not be able to edit)
CVSS 3.1MEDIUM 4.3·Network·Low privileges·No interaction·EPSS 0.00793·Published 2021-11-01·Fixed in 2.3.1CWE-284