Plugin icon

Meta Box

meta-box

Vulnerabilities:

5

Last Updated:

February 2, 2026

Active Installs:

500000

Published
Title
Fixed in
CVSS
Published
2024-08-09
Title
Meta Box – WordPress Custom Fields Framework < 5.9.11 - Missing Authorization to Information Exposure
Fixed in
Fixed in 5.9.11
CVSS
4.3 (medium)
Published
2024-03-25
Title
Meta Box < 5.9.4 - Contributor+ Arbitrary Posts' Custom Field Disclosure
Fixed in
Fixed in 5.9.4
CVSS
3.8 (low)
Published
2024-02-05
Title
Meta Box – WordPress Custom Fields Framework < 5.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 5.9.3
CVSS
5.5 (medium)
Published
2019-02-02
Title
Meta Box < 4.16.3 - Unauthorised File Deletion
Fixed in
Fixed in 4.16.3
CVSS
6.5 (medium)
Published
2019-02-01
Title
Meta Box < 4.16.2 - Mishandled Uploaded Files
Fixed in
Fixed in 4.16.2
CVSS
7.5 (high)