mr2p Meta Field Block – Display custom fields in the Block Editor without coding

• CVE-2026-3173 Medium 6.5 Meta Field Block <= 1.5.1 - Insecure Direct Object Reference to Authenticated (Contributor+) Arbitrary User Meta Exposure 0.2%
• CVE-2026-6252 Medium 6.4 Meta Field Block <= 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tagName' Block Attribute 0.2%
• CVE-2024-13362 Medium 6.1 Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter 0.3%