WordPress Plugin Vulnerabilities

Meta Box < 4.16.2 - Mishandled Uploaded Files

Description

The Meta Box – WordPress Custom Fields Framework WordPress plugin was affected by a Mishandled Uploaded Files security vulnerability.

Affects Plugins

Plugin icon
meta-box
Fixed in 4.16.2

References

CVE
CVE-2019-14794

Miscellaneous

Verified
Yes
WPVDB ID
e798fbc8-6dca-4046-83bf-76650c892350

Timeline

Publicly Published
2019-02-01 (about 7 years ago)
Added
2019-08-21 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2025-10-23
Title
AIO Forms < 1.3.19 - Authenticated (Admin+) Arbitrary File Upload via Zip Import
Published
2025-04-23
Title
PowerPress Podcasting plugin by Blubrry < 11.12.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2025-09-03
Title
Make Connector < 1.6.0 - Authenticated (Administrator+) Arbitrary File Upload
Published
2025-11-20
Title
S2B AI Assistant – ChatBot, ChatGPT, OpenAI, Content & Image Generator < 1.7.9 - Authenticated (Editor+) Arbitrary File Upload
Published
2024-10-14
Title
Feed Comments Number <= 0.2.1 - Unauthenticated Arbitrary File Upload