Medium · 4.3 CVE-2026-49051 EUVD-2026-32541GHSA-gq7p-2w5v-c75x

WordPress WP Meta and Date Remover plugin <= 2.3.6 - Broken Access Control vulnerability

Published May 27, 2026 · Updated May 27, 2026 · Assigned by Patchstack

Vendor: Prasad Kirpekar Product: WP Meta and Date Remover

Description

Missing Authorization vulnerability in Prasad Kirpekar WP Meta and Date Remover allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects WP Meta and Date Remover: from n/a through 2.3.6.

Affected products

Vendor	Product	Affected	Fixed
Prasad Kirpekar	WP Meta and Date Remover	≤ 2.3.6	—

References

https://patchstack.com/database/wordpress/plugin/wp-meta-and-date-remover/vulnerability/wordpress-wp-meta-and-date-remover-plugin-2-3-6-broken-access-control-vulnerability?_s_id=cve vdb-entry