Ticket #38293: 38293.patch

src/wp-admin/includes/post.php

@@ -288 +288 @@
                                 continue;
                         if ( $meta->post_id != $post_ID )
                                 continue;
+                        if ( is_protected_meta( $meta->meta_key, 'post' ) || ! current_user_can( 'edit_post_meta', $post_ID, $meta->meta_key ) )
+                                continue;
                         if ( is_protected_meta( $value['key'], 'post' ) || ! current_user_can( 'edit_post_meta', $post_ID, $value['key'] ) )
                                 continue;
                         update_meta( $key, $value['key'], $value['value'] );