The Bulk Date Change WordPress plugin before version 1.12 had a security issue which allowed people with Contributor roles to view the titles of other users’ private posts and to change the date of other users’ posts without proper permission.
The Bulk Date Change WordPress plugin before version 1.12 had a security issue which allowed people with Contributor roles to view the titles of other users’ private posts and to change the date of other users’ posts without proper permission.
This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!
Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:
> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21
Is this information incorrect? Please leave us a message.