| Package | Affected versions | Patched versions |
|---|---|---|
| schema | < 2.7.16 | 2.7.16 |
The wp-schema-pro WordPress plugin before 2.7.16 does not validate post access allowing a contributor user to access custom fields on any post regardless of post type or status via a shortcode
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free