Plugin icon

Meta Box

meta-box

Vulnerabilities:

6

Last Updated:

March 5, 2026

Active Installs:

500000

Published
Title
Fixed in
CVSS
Published
2026-03-06
Title
Meta Box < 5.11.2 - Contributor+ Arbitrary File Deletion
Fixed in
Fixed in 5.11.2
CVSS
7.2 (high)
Published
2024-08-09
Title
Meta Box – WordPress Custom Fields Framework < 5.9.11 - Missing Authorization to Information Exposure
Fixed in
Fixed in 5.9.11
CVSS
4.3 (medium)
Published
2024-03-25
Title
Meta Box < 5.9.4 - Contributor+ Arbitrary Posts' Custom Field Disclosure
Fixed in
Fixed in 5.9.4
CVSS
3.8 (low)
Published
2024-02-05
Title
Meta Box – WordPress Custom Fields Framework < 5.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 5.9.3
CVSS
5.5 (medium)
Published
2019-02-02
Title
Meta Box < 4.16.3 - Unauthorised File Deletion
Fixed in
Fixed in 4.16.3
CVSS
6.5 (medium)
Published
2019-02-01
Title
Meta Box < 4.16.2 - Mishandled Uploaded Files
Fixed in
Fixed in 4.16.2
CVSS
7.5 (high)