CVEs-PoC/2021/CVE-2021-24781.md

### [CVE-2021-24781](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-24781)
![](https://img.shields.io/static/v1?label=Product&message=Image%20Source%20Control&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=2.3.1%3C%202.3.1%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-284%20Improper%20Access%20Control&color=brighgreen)

### Description

The Image Source Control WordPress plugin before 2.3.1 allows users with a role as low as Contributor to change arbitrary post meta fields of arbitrary posts (even those they should not be able to edit)

### POC

#### Reference
- https://wpscan.com/vulnerability/3550ba54-7786-4ad9-aeb1-1c0750f189d0

#### Github
No PoCs found on GitHub currently.