CVE-2021-24842CWE-862
Bulk Datetime Change < 1.12 - Missing Authorisation
published November 29, 2021
What it is
The Bulk Datetime Change WordPress plugin before 1.12 does not enforce capability checks which allows users with Contributor roles to 1) list private post titles of other users and 2) change the posted date of other users' posts.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.00722 · 53.4th percentile
- Weakness
- CWE-862 · Missing Authorization
- Published
- 2021-11-29T08:25Z
EPSS history
Timeline