The Bulk Datetime Change WordPress plugin prior to 1.12 does not enforce capability checks which allows users with Contributor roles to 1) list private post titles of other users and 2) change the posted date of other users' posts.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
bulk datetime change project bulk datetime change |