CVSS 3.1 Score 7.5 of 10 (high)


Published Oct 28, 2023
Updated: Nov 8, 2023
CWE ID 862


CVE-2023-5426 is a cyber vulnerability that affects the Post Meta Data Manager plugin for WordPress versions up to and including 1.2.0. This vulnerability allows unauthenticated attackers to delete user, term, and post meta belonging to arbitrary users, due to a missing capability check on certain functions. The vulnerability has a risk score of 26 and a base severity rating of HIGH. The exploitability score is 3.9, indicating that it is relatively easy for attackers to exploit this vulnerability. The impact score is 3.6, with high integrity impact and no confidentiality impact. The attack vector is through the network and the attack complexity is low. There are multiple affected products listed, including tUBjbp, tUBjbo, tUBjbr, tUBjbq, tUBjbl, tUBjbk, tUBjbn, tUBjbm, t5UtLC, tUBjbh, tUBjbj, and tUBjbi. It is advised to remediate this vulnerability by updating the Post Meta Data Manager plugin to a version that addresses this issue promptly to prevent unauthorized data modification and potential harm to an organization's data security.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-5426 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options