CVE-2026-39468

MEDIUM

MEDIUM Priority: 0.08 BB Relevance: 64/100

Published: 2026-06-15 Modified: 2026-10-25 First seen: 2026-10-29 Status: active

Network No Auth No Interaction Scope Change

AV: Network

AC: High

PR: None

UI: None

S: Changed

C: None

I: None

A: High

Contributor Arbitrary File Deletion in Meta Box – WordPress Custom Fields Framework <= 5.11.1 versions.

CWE-22

64 / 100

✓ Network accessible
✓ No authentication
✓ No user interaction

6.8 / 10.0 v3.1

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H

1.22%

Raw Score 0.012210

Percentile 68.6%

Date 2026-10-29

2026-10-29

0.01221

2026-10-28

0.01221

nvd ref →