https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T14:05:10.134898+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-24872 CVE-2021-24872 — Get Custom Field Values < 4.0 - Contributors+ Arbitrary Post Metadata Access 2026-10-06T14:05:10.153703+00:00

Affected: Unknown Get Custom Field Values

The Get Custom Field Values WordPress plugin before 4.0 allows users with a role as low as Contributor to access other posts metadata without validating the permissions. Eg. contributors can access admin posts metadata.