TI-2026-67960 CVE-2026-39761 · GHSA-4v6j-5867-cj5q
Privilege escalation in WordPress Meta Box AIO plugin
Priority MEDIUM 49
Unauthenticated Privilege Escalation in Meta Box AIO <= 3.7.1 versions.
eLightUp
Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
eLightUp records in CISA KEVNo eLightUp vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
6 records
TI-2026-28442 CVE-2026-39468 · GHSA-rw49-7h3x-83f2
WordPress Meta Box – WordPress Custom Fields Framework plugin <= 5.11.1 - Arbitrary File Deletion vulnerability
Priority LOW 33
Contributor Arbitrary File Deletion in Meta Box – WordPress Custom Fields Framework <= 5.11.1 versions.
TI-2026-79205 CVE-2026-112826 · GHSA-c4vr-vvvc-4qxc
Missing authorization in Falcon WordPress Optimizations plugin
Priority LOW 30
Missing Authorization vulnerability in eLightUp Falcon – WordPress Optimizations & Tweaks falcon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Falcon – WordPress Optimizations…
TI-2026-76902 CVE-2026-109700 · GHSA-cpcj-mprm-rqgp
Missing authorization in Meta Box WordPress plugin
Priority LOW 29
Missing Authorization vulnerability in eLightUp Meta Box – WordPress Custom Fields Framework meta-box allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Meta Box – WordPress Custom…
TI-2026-41366 CVE-2026-57429 · GHSA-653g-xfpx-c824
WordPress Slim SEO plugin <= 4.6.2 - Broken Access Control vulnerability
Priority LOW 29
Contributor Broken Access Control in Slim SEO <= 4.6.2 versions.
TI-2023-12743 CVE-2023-28174 · GHSA-m28r-jpw6-mmrh
WordPress eRocket Plugin <= 1.2.4 is vulnerable to Cross Site Scripting (XSS)
Priority LOW 27
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in eLightUp eRocket plugin <= 1.2.4 versions.