CVE-2023-5426

Summary

CVE-2023-5426 is a cyber vulnerability that affects the Post Meta Data Manager plugin for WordPress versions up to and including 1.2.0. This vulnerability allows unauthenticated attackers to delete user, term, and post meta belonging to arbitrary users, due to a missing capability check on certain functions. The vulnerability has a risk score of 26 and a base severity rating of HIGH. The exploitability score is 3.9, indicating that it is relatively easy for attackers to exploit this vulnerability. The impact score is 3.6, with high integrity impact and no confidentiality impact. The attack vector is through the network and the attack complexity is low. There are multiple affected products listed, including tUBjbp, tUBjbo, tUBjbr, tUBjbq, tUBjbl, tUBjbk, tUBjbn, tUBjbm, t5UtLC, tUBjbh, tUBjbj, and tUBjbi. It is advised to remediate this vulnerability by updating the Post Meta Data Manager plugin to a version that addresses this issue promptly to prevent unauthorized data modification and potential harm to an organization's data security.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.