Wpexpertplugins Post Meta Data Manager — known CVE vulnerabilities

Every CVE whose affected-product data names Wpexpertplugins Post Meta Data Manager, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2023-5425 — CVSS 8.8 (high): The Post Meta Data Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the…
• CVE-2023-5426 — CVSS 7.5 (high): The Post Meta Data Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the…
• CVE-2024-13835 — CVSS 7.2 (high): The Post Meta Data Manager plugin for WordPress is vulnerable to multisite privilege escalation in all versions up to, and including…
• CVE-2024-6264 — CVSS 6.4 (medium): The Post Meta Data Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘$meta_key’ parameter in all…
• CVE-2023-5776 — CVSS 4.3 (medium): The Post Meta Data Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.1…