CVE-2021-24842: Bulk Datetime Change Project Bulk Datetime Change

Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days.

The Bulk Datetime Change WordPress plugin before 1.12 does not enforce capability checks which allows users with Contributor roles to 1) list private post titles of other users and 2) change the posted date of other users' posts.

Affected products

• Bulk Datetime Change Project Bulk Datetime Change: before 1.12 (fixed in 1.12)

Published 2021-11-29. Last modified 2026-06-17.