Security Advisory

CVE-2021-24783

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-11-08 17:35:19
Last updated 2024-08-03 19:42:17
Assigner WPScan
State PUBLISHED

Description

The Post Expirator WordPress plugin before 2.6.0 does not have proper capability checks in place, which could allow users with a role as low as Contributor to schedule deletion of arbitrary posts.