Threats tagged 'ghsa-488p-3q24-423r'

The Secure Custom Fields WordPress plugin versions prior to 6.9.8 have a vulnerability where field-group location rules are not re-applied when saving values through the post editor. This flaw allows users with contributor-level access or higher to write custom fields that the site intended to restrict to administrators onto their own posts.