Description In WordPress before 4.7.5, there is a lack of capability checks for post meta data in the XML-RPC API. Remediation References CVE-2017-9065 Related Vulnerabilities Liferay DXP Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2022-42129) WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce Cross-Site Scripting (5.7.11) e107 Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-8098) TYPO3 Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-3714) WordPress Plugin Formidable Forms-Contact Form, Survey, Quiz, Calculator & Custom Form Builder Cross-Site Request Forgery (4.02.03) Severity High Classification CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Tags Missing Update Known Vulnerabilities CWE-20 CVE-2017-9065