eLightUp

Products

Product	CVEs	Exploited	Latest
Meta Box – WordPress Custom Fields Framework	2	–	Oct 20, 2026
eRocket	1	–	Jun 22, 2023
Falcon – WordPress Optimizations & Tweaks	1	–	Oct 22, 2026
Meta Box AIO	1	–	Oct 6, 2026
Slim SEO	1	–	Jun 25, 2026

CVE-2026-112826 Medium 5.3 WordPress Falcon – WordPress Optimizations & Tweaks plugin <= 2.12.0 - Broken Access Control vulnerability 0.3%
CVE-2026-109700 Medium 6.5 WordPress Meta Box – WordPress Custom Fields Framework plugin <= 5.15.2 - Broken Access Control vulnerability 0.3%
CVE-2026-39761 Critical 9.8 WordPress Meta Box AIO plugin <= 3.7.1 - Privilege Escalation vulnerability 0.4%
CVE-2026-57429 Medium 6.5 WordPress Slim SEO plugin <= 4.6.2 - Broken Access Control vulnerability 0.3%
CVE-2026-39468 Medium 6.8 WordPress Meta Box – WordPress Custom Fields Framework plugin <= 5.11.1 - Arbitrary File Deletion vulnerability 1.2%
CVE-2023-28174 Medium 5.9 WordPress eRocket Plugin <= 1.2.4 is vulnerable to Cross Site Scripting (XSS) 0.4%