Metabox Meta Box
4 CVEs affecting Metabox Meta Box. Latest disclosed: 2024-04-15. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-14794 | High | 7.5 | 2019-08-09 | The Meta Box plugin before 4.16.2 for WordPress mishandles the uploading of files to custom folders. |
CVE-2019-14793 | Medium | 6.5 | 2019-08-09 | The Meta Box plugin before 4.16.3 for WordPress allows file deletion via ajax, with the wp-admin/admin-ajax.php?action=rwmb_delete_file attachment_id parameter. |
CVE-2023-6526 | Medium | 6.4 | 2024-02-05 | The Meta Box – WordPress Custom Fields Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom post meta values displayed throug… |
CVE-2024-1204 | Medium | 4.3 | 2024-04-15 | The Meta Box WordPress plugin before 5.9.4 does not prevent users with at least the contributor role from access arbitrary custom fields assigned to other use… |