Log in Start free

mr2p

Products

ProductCVEsExploitedLatest
Meta Field Block – Display custom fields in the Block Editor without coding3–May 28, 2026
SVG Block1–Nov 19, 2024

Exploited and recent CVEs

  • CVE-2026-3173 Medium 6.5 Meta Field Block <= 1.5.1 - Insecure Direct Object Reference to Authenticated (Contributor+) Arbitrary User Meta Exposure 0.2%
  • CVE-2026-6252 Medium 6.4 Meta Field Block <= 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tagName' Block Attribute 0.2%
  • CVE-2024-13362 Medium 6.1 Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter 0.3%
  • CVE-2024-11098 Medium 5.5 SVG Block <= 1.1.24 - Authenticated (Administrator+) Stored Cross-Site Scripting via SVG File Upload 0.4%