MB
Product
Meta Box
5
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 3Low 0
Watch
Add Meta Box to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-14794 | 7.5 | Aug 9 | The Meta Box plugin before 4.16.2 for WordPress mishandles the uploading of files to custom folders Affected: before 4.16.2 |
| CVE-2025-14675 | 7.2 | Mar 7 | Meta Box <= 5.11.1 - Authenticated (Contributor+) Arbitrary File Deletion Affected: through 5.11.1 |
| CVE-2019-14793 | 6.5 | Aug 9 | The Meta Box plugin before 4.16.3 for WordPress allows file deletion via ajax, with the wp-admin/admin-ajax.php?action=rwmb_delete_file attachment_id parameter Affected: before 4.16.3 |
| CVE-2023-6526 | 5.4 | Feb 5 | Meta Box – WordPress Custom Fields Framework <= 5.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 5.9.2 |
| CVE-2024-1204 | 4.3 | Apr 15 | Meta Box < 5.9.4 - Contributor+ Arbitrary Posts' Custom Field Disclosure Affected: before 5.9.4 |
Showing 5