eLightUp Meta Box – WordPress Custom Fields Framework

• CVE-2026-123472 Medium 6.5 WordPress Meta Box – WordPress Custom Fields Framework plugin <= 5.15.3 - Cross Site Scripting (XSS) vulnerability –
• CVE-2026-120836 Medium 6.5 WordPress Meta Box – WordPress Custom Fields Framework plugin <= 5.15.3 - Broken Access Control vulnerability –
• CVE-2026-109700 Medium 6.5 WordPress Meta Box – WordPress Custom Fields Framework plugin <= 5.15.2 - Broken Access Control vulnerability 0.3%
• CVE-2026-39468 Medium 6.8 WordPress Meta Box – WordPress Custom Fields Framework plugin <= 5.11.1 - Arbitrary File Deletion vulnerability 1.2%