Meta Box
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Meta Box AIO | 1 | – | Jul 29, 2026 |
| Meta Box Frontend Submission | 1 | – | Sep 22, 2026 |
Exploited and recent CVEs
- CVE-2026-13355 Meta Box AIO <= 3.11.0 And Standalone Plugin Extensions - Unauthenticated Privilege Escalation to Administrator to 'rwmb_frontend_field_object_id' Parameter 0.6%
- CVE-2026-14488 Meta Box AIO <= 3.8.0 - Missing Authorization to Unauthenticated Arbitrary Post Deletion via 'rwmb_frontend_field_object_id' Parameter 0.5%