CVE-2023-5537

CVE-2023-5537 environments—The Delete Usermetas WordPress plugin (versions ≤ 1.1.2) is vulnerable to Cross‑Site Request Forgery due to missing nonce validation in delumet_options_page(). Unauthenticated attackers can craft requests to remove user meta when a site admin visits a malicious link. CV...