Skip to content
OpenAdvisories

Vendor

jose-lazo

1 known vulnerabilities.

Products

Delete Usermetas 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2023-5537

    Delete Usermetas <= 1.1.2 - Cross-Site Request Forgery

    The Delete Usermeta plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing nonce validation on the delumet_options_page() function. This makes it possible for unauthenticated attackers …

    jose-lazo Delete Usermetas Web / CMS