Post Meta Data Manager

Post Meta Data Manager has 6 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2025; 5 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 6.6, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 3 high. 2023 was the busiest year with 4 disclosures.

The most common weakness is Missing Authorization, behind 3 of the records (50%). Other recurring categories include Cross-Site Request Forgery (CSRF), Cross-Site Scripting.

5 of the records (83%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2025.

All of these findings were reported by Francesco Carlucci. Post Meta Data Manager is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.

Strategic Overview

Avg CVSSMedium
6.6/ 10
Patch Coverage83%
Open

1

Fixed

5

Get automatic notifications for all Post Meta Data Manager vulnerabilities before they are exploited.

Most severe open issueCVSS 7.2CVE-2024-13835

Post Meta Data Manager <= 1.4.4 - Authentciated (Admin+) Multisite Privilege Escalation

Read the full analysis

Vulnerability Records

6 records
Plugin Profile
Latestv1.5.0

Post Meta Data Manager

WpExpertPlugins

Author

WpExpertPlugins

5.0(15)
100/100
Last Updated
2026-04-03 (5mo ago)
Active Installs
1,000+
Downloads
23,401
Requires WP
6.0.1+
Requires PHP
0+
Tested up to
WP 6.8.8
Created
2021-08-25 (5y ago)

Stop wasting time editing hidden or custom post meta values in the database or code. Well, you’re looking at the ultimate solution. The Post Meta Data Manager helps you effortlessly view, edit, search, and manage Custom Fields/Post Meta. It elegantly displays all your post meta keys and values inside a metabox situated directly at the bottom of the post editing screen. Powerful Meta Management Features: User Meta Manager: Effortlessly manage user meta fields straight from the user profile edit screen. Taxonomy Meta Manager: Manage term and taxonomy meta fields efficiently from any term edit page. Custom Post Type Support: Configure which post types display the meta data manager box. Bulk Delete Functionality: Seamlessly select and bulk delete multiple meta keys at once while editing a specific post to save time. Key Features: Quickly search, sort, and edit specific meta values right on the editing screen. Supports ascending and descending sorting on the key column for intuitive navigation. Elegant pagination shows 10 items per page—say goodbye to endlessly long lists! Fully compatible with any built-in or custom post types. Got feature ideas or looking for enhancements? We’re all ears! * Submit a Feature Request Contributing Help us make the plugin even better! Report bugs and suggest new features on GitHub or the WordPress Support Forum.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C