Vulnerabilities

TI-2026-86626 CVE-2026-123472 · GHSA-cqgc-p4qg-hj32

Stored cross-site scripting in Meta Box WordPress plugin

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in eLightUp Meta Box – WordPress Custom Fields Framework meta-box allows Stored XSS.This issue affects Meta Box – WordPre…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00179 Published 2026-11-07 No fix listed CWE-79

TI-2026-86624 CVE-2026-120836 · GHSA-x9qq-f758-q4c6

Missing authorization in Meta Box WordPress plugin

LOW 29

Missing Authorization vulnerability in eLightUp Meta Box – WordPress Custom Fields Framework meta-box allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Meta Box – WordPress Custom…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0029 Published 2026-11-07 No fix listed CWE-862

TI-2026-79205 CVE-2026-112826 · GHSA-c4vr-vvvc-4qxc

Missing authorization in Falcon WordPress Optimizations plugin

LOW 30

Missing Authorization vulnerability in eLightUp Falcon – WordPress Optimizations & Tweaks falcon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Falcon – WordPress Optimizations…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00276 Published 2026-10-22 No fix listed CWE-862

TI-2026-76902 CVE-2026-109700 · GHSA-cpcj-mprm-rqgp

Missing authorization in Meta Box WordPress plugin

LOW 29

Missing Authorization vulnerability in eLightUp Meta Box – WordPress Custom Fields Framework meta-box allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Meta Box – WordPress Custom…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00315 Published 2026-10-20 No fix listed CWE-862

TI-2026-67960 CVE-2026-39761 · GHSA-4v6j-5867-cj5q

Privilege escalation in WordPress Meta Box AIO plugin

MEDIUM 49

Unauthenticated Privilege Escalation in Meta Box AIO <= 3.7.1 versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00437 Published 2026-10-06 No fix listed CWE-266

TI-2026-41366 CVE-2026-57429 · GHSA-653g-xfpx-c824

WordPress Slim SEO plugin <= 4.6.2 - Broken Access Control vulnerability

LOW 29

Contributor Broken Access Control in Slim SEO <= 4.6.2 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0034 Published 2026-06-25 No fix listed CWE-862

TI-2026-28442 CVE-2026-39468 · GHSA-rw49-7h3x-83f2

WordPress Meta Box – WordPress Custom Fields Framework plugin <= 5.11.1 - Arbitrary File Deletion vulnerability

LOW 33

Contributor Arbitrary File Deletion in Meta Box – WordPress Custom Fields Framework <= 5.11.1 versions.

CVSS 3.1MEDIUM 6.8 Network No auth No interaction EPSS 0.01221 Published 2026-06-15 No fix listed CWE-22

TI-2023-12743 CVE-2023-28174 · GHSA-m28r-jpw6-mmrh

WordPress eRocket Plugin <= 1.2.4 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in eLightUp eRocket plugin <= 1.2.4 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00392 Published 2023-06-22 No fix listed CWE-79

Vulnerabilities

Filters