The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The Post Meta Data Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the pmdm_wp_change_user_meta and pmdm_wp_change_post_meta functions in versions up to, and including, 1.2.0. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to gain elevated (e.g., administrator) privileges.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Post Meta Data Manager Plugin | — | Update post-meta-data-manager plugin to version 1.2.1, or a newer patched version | May 15, 2025 | Oct 27, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub