All CVEs — page 1103 of 1220
The complete archive, 25 per page, newest first. 30483 records. Search instead.
The WC Fields Factory WordPress plugin before 4.1.11 allows authenticated users with Subscriber-level access to manipulate post meta and pricing rules, potentially leading to unauthorized changes to product prices and metadata.
The flaw in the WP Recipe Maker plugin allows unauthenticated users to write unlimited data into any user's metadata, potentially preventing account access, including for administrators.