Gandhihitesh9 vulnerabilities
We track 4 vulnerabilities in Gandhihitesh9 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on March 8, 2025.
Latest Gandhihitesh9 vulnerabilities
- 7.2 High severity
Post Meta Data Manager: Improper Privilege Management
The Post Meta Data Manager plugin for WordPress is vulnerable to multisite privilege escalation in all versions up to, and including, 1.4.4. This is due to the plugin not properly verifying the existence of a multisite installation prior to allowing user meta
- 8.8 High severity
Post Meta Data Manager: Cross-Site Request Forgery
The Post Meta Data Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.1. This is due to missing nonce validation on the pmdm_wp_ajax_delete_meta, pmdm_wp_delete_user_meta, and pmdm_wp_delete_user_
- 7.5 High severity
Post Meta Data Manager: Missing Authorization
The Post Meta Data Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the pmdm_wp_delete_user_meta, pmdm_wp_delete_term_meta, and pmdm_wp_ajax_delete_meta functions in versions up to, and includ
- 8.8 High severity
Post Meta Data Manager: Missing Authorization
The Post Meta Data Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the pmdm_wp_change_user_meta and pmdm_wp_change_post_meta functions in versions up to, and including, 1.2.0. This makes it p