Vulnerabilities in Meta Box

2 results

CVE-2026-13355CRITICALMeta Box AIO <= 3.11.0 And Standalone Plugin Extensions - Unauthenticated Privilege Escalation to Administrator to 'rwmb_frontend_field_object_id' ParameterEPSS 0.6%CVE-2026-14488CRITICALMeta Box AIO <= 3.8.0 - Missing Authorization to Unauthenticated Arbitrary Post Deletion via 'rwmb_frontend_field_object_id' ParameterEPSS 0.5%