Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2024-11-21
CVE-2021-24872 - Get Custom Field Values Plugin
The Get Custom Field Values WordPress plugin before 4.0 allows users with a role as low as Contributor to access other posts metadata without validating the permissions. Eg. contributors can access admin posts metadata.
PLUGIN
Get Custom Field Values
CVE-2021-24872
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2021-24871 - Get Custom Field Values Plugin
The Get Custom Field Values WordPress plugin before 4.0.1 does not escape custom fields before outputting them in the page, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks
PLUGIN
Get Custom Field Values
CVE-2021-24871
Risk Score