Mr2p

4 CVEs in 2 Mr2p products, including Meta Field Block – Display Custom Fields In The Block Editor Without Coding, Svg Block.

Mr2p products with known CVEs

ProductCVEs
Meta Field Block – Display Custom Fields In The Block Editor Without Coding3
Svg Block1
Mr2p CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-3173Medium6.52026-05-28The Meta Field Block plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.5.1. This is due to the plu…
CVE-2026-6252Medium6.42026-05-14The Meta Field Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tagName' block attribute in all versions up to, and including…
CVE-2024-13362Medium6.12026-05-01Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient inp…
CVE-2024-11098Medium5.52024-11-19The SVG Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REST API SVG File uploads in all versions up to, and including, 1.1.24 due…