Login Request a demo
MB
Product
Meta Box
by metabox · last CVE Mar 7, 2026
5
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 2Medium 3Low 0
Severity
All severities5Critical0High2Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Meta Box to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-14793
6.5
2%
Aug 9
The Meta Box plugin before 4.16.3 for WordPress allows file deletion via ajax, with the wp-admin/admin-ajax.php?action=rwmb_delete_file attachment_id parameter
Affected: before 4.16.3
CVE-2023-6526
5.4
0%
Feb 5
Meta Box – WordPress Custom Fields Framework <= 5.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: through 5.9.2
CVE-2024-1204
4.3
1%
Apr 15
Meta Box < 5.9.4 - Contributor+ Arbitrary Posts' Custom Field Disclosure
Affected: before 5.9.4
Showing 3