Post Meta Data Manager WordPress Plugin Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in the Post Meta Data Manager plugin for WordPress, affecting all versions through 1.4.3. The issue arises from the plugin's failure to properly verify the presence of a multisite installation before allowing modifications to user meta. This flaw enables authenticated attackers with Administrator-level access or higher to gain elevated privileges on otherwise inaccessible subsites.

Impact

Exploitation of this vulnerability allows for unauthorized privilege escalation on multisite installations, potentially leading to unauthorized access or actions on subsites.

Remediation

No known patch is available. Users are advised to review the vulnerability details and consider uninstalling the affected plugin.