CVE-2021-24842

Name of the Vulnerable Software and Affected Versions: Bulk Datetime Change WordPress plugin versions prior to 1.12

Description: The issue allows users with Contributor roles to list private post titles of other users and change the posted date of other users' posts due to a lack of capability checks.

Recommendations: For versions prior to 1.12, update to version 1.12 or later to resolve the issue. As a temporary workaround, consider restricting the Contributor role's capabilities to prevent unauthorized access to private posts and their modification.