WordPress WP Meta and Date Remover Plugin Broken Access Control Vulnerability

Vulnerability Overview The WordPress WP Meta and Date Remover plugin, versions <= 2.3.6, contains a Broken Access Control vulnerability. This vulnerability allows unauthorized users to perform operations requiring higher privileges. Affected Scope Software Name: WP Meta and Date Remover Type: Plugin Affected Versions: <= 2.3.6 Vulnerability Type: Broken Access Control Priority: Low priority, no significant threat Remediation Current Status: No official patch available Recommended Measures: Update the affected plugin immediately. If updating is not possible, contact your hosting provider or website developer for assistance. Additional Information Report Date: February 3, 2026 Early Warning Sent Date: May 27, 2026 Publication Date: May 27, 2026 Risk Description Such vulnerabilities are commonly used in large-scale attack campaigns. Attackers can exploit them to target tens of thousands of websites within a short period, regardless of their traffic volume or popularity. Solution The severity of this security issue is low, and it is unlikely to be exploited. Timeline Reporter: Truong Hữu Phúc (truonghuuphuoc) Early Warning Sent: May 27, 2026 Publication: May 27, 2026 Supplementary Information How to obtain fastest protection: Contact Patchstack How to mitigate the vulnerability: Contact Patchstack Why attackers target this: Contact Patchstack If your website has been compromised: Contact Patchstack Subscription Weekly WordPress Security Intelligence: Enter your email address to subscribe Footer Information Vulnerability Mitigation: Pricing, Application Security (SCA), Rapid Mitigation (API), Threat Intelligence (API), VS Munin, VS Imunify360, VS Wordfence, Documentation, Service Status, Login Code Security: Hosted VDP, Active VDP Directory, Security Audits, Compliance (CRA), Login Vulnerability Bounty: Vulnerability Bounty, Leaderboard, Guidelines, Reports, Discord, Login Use Cases: Web Developers, Hosts, Software Vendors, WordPress, WooCommerce Resources: Partners, Vulnerability Database, 2026 Whitepaper, Articles, Case Studies, Webinars, Vulnerability Statistics Patchstack: About, Careers, Store, Media Kit, LinkedIn, Facebook, X, Report a Vulnerability Copyright Information © 2026 Patchstack DPA Privacy Policy Accessibility Terms and Conditions Summary A Broken Access Control vulnerability exists in the WordPress WP Meta and Date Remover plugin, versions <= 2.3.6. It is recommended to update the plugin immediately or contact relevant support for assistance.

Goal Reached Thanks to every supporter — we hit 100%!

WordPress WP Meta and Date Remover Plugin Broken Access Control Vulnerability