PatchTheCVEpost meta data manager vulnerabilities and fixes
Recent CVEs affecting post meta data manager, with upgrade or downgrade steps. 2 tracked.
Also searched as: postmetadatamanager.
post meta data manager has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2025-03-08. Highest priority: CVE-2024-13835 (score 34/100).
- CVE-2024-6264 MEDIUM 6.4 UPGRADE The Post Meta Data Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘$meta_ke
- CVE-2024-13835 HIGH 7.2 UPGRADE The Post Meta Data Manager plugin for WordPress is vulnerable to multisite privilege escalation in all version
FAQ
How do I fix post meta data manager vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is post meta data manager being exploited right now?
None of the tracked post meta data manager CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which post meta data manager CVE should I patch first?
CVE-2024-13835 currently ranks highest (34/100): The Post Meta Data Manager plugin for WordPress is vulnerable to multisite privilege escalation in all version.