Launchpad.net

CVE 2017-9065

In WordPress before 4.7.5, there is a lack of capability checks for post meta data in the XML-RPC API.

See the CVE page on Mitre.org for more details.