User Meta Shortcodes Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

User Meta Shortcodes Project records in CISA KEV

No User Meta Shortcodes Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

User Meta Shortcodes 1 record LOW

Records

1 record

TI-2021-07141 CVE-2021-24859 · GHSA-m96c-8jmv-4r54

User Meta Shortcodes <= 0.5 - Contributor+ Unauthorized Arbitrary User Metadata Access

LOW 22

The User Meta Shortcodes WordPress plugin through 0.5 registers a shortcode that allows any user with a role as low as contributor to access other users metadata by specifying the user login as a parameter.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00809 Published 2021-12-13 No fix listed CWE-284

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0