Description
In WordPress before 4.7.5, there is a lack of capability checks for post meta data in the XML-RPC API.
Remediation
References
Related Vulnerabilities
WordPress Plugin Ads Pro-Multi-Purpose WordPress Advertising Manager Multiple Vulnerabilities (3.4)
WordPress Plugin Insert or Embed Articulate Content into WordPress Remote Code Execution (4.2997)
Drupal Core 4.6.x Denial of Service (4.6.0 - 4.6.10)
Werkzeug WSGI Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-34069)
WordPress Plugin Disable Feeds Unspecified Vulnerability (1.4)