1 results (0.001 seconds)
CVSS: 4.3EPSS: %CPEs: 1EXPL: 0
CVE-2024-43235 – Meta Box – WordPress Custom Fields Framework <= 5.9.10 - Missing Authorization to Information Exposure
https://notcve.org/view.php?id=CVE-2024-43235
The Meta Box – WordPress Custom Fields Framework plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the query function called via 'ajax_get_posts' in versions up to, and including, 5.9.10. This makes it possible for authenticated attackers, with contributor-level access and above, to view arbitrary posts. • CWE-862: Missing Authorization •