Skip to content
OpenAdvisories

Vendor

eLightUp

8 known vulnerabilities.

Products

Meta Box – WordPress Custom Fields Framework 4 Slim SEO 1 Meta Box AIO 1 Falcon – WordPress Optimizations & Tweaks 1 eRocket 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-123472

    WordPress Meta Box – WordPress Custom Fields Framework plugin <= 5.15.3 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in eLightUp Meta Box – WordPress Custom Fields Framework meta-box allows Stored XSS.This issue affects Meta Box – WordPress Custom Fields Framework: from n/a th…

    eLightUp Meta Box – WordPress Custom Fields Framework Web / CMS
  • Medium 6.5
    CVE-2026-120836

    WordPress Meta Box – WordPress Custom Fields Framework plugin <= 5.15.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in eLightUp Meta Box – WordPress Custom Fields Framework meta-box allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Meta Box – WordPress Custom Fields Framework: from n/a through 5.1…

    eLightUp Meta Box – WordPress Custom Fields Framework Web / CMS
  • Medium 5.3
    CVE-2026-112826

    WordPress Falcon – WordPress Optimizations & Tweaks plugin <= 2.12.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in eLightUp Falcon – WordPress Optimizations & Tweaks falcon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Falcon – WordPress Optimizations & Tweaks: from n/a through 2.12.0.

    eLightUp Falcon – WordPress Optimizations & Tweaks Web / CMS
  • Medium 6.5
    CVE-2026-109700

    WordPress Meta Box – WordPress Custom Fields Framework plugin <= 5.15.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in eLightUp Meta Box – WordPress Custom Fields Framework meta-box allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Meta Box – WordPress Custom Fields Framework: from n/a through 5.1…

    eLightUp Meta Box – WordPress Custom Fields Framework Web / CMS
  • Medium 6.5
    CVE-2026-57429

    WordPress Slim SEO plugin <= 4.6.2 - Broken Access Control vulnerability

    Contributor Broken Access Control in Slim SEO <= 4.6.2 versions.

    eLightUp Slim SEO
  • Medium 6.8
    CVE-2026-39468 Scanner template

    WordPress Meta Box – WordPress Custom Fields Framework plugin <= 5.11.1 - Arbitrary File Deletion vulnerability

    Contributor Arbitrary File Deletion in Meta Box – WordPress Custom Fields Framework <= 5.11.1 versions.

    eLightUp Meta Box – WordPress Custom Fields Framework Web / CMS
  • Medium 5.9
    CVE-2023-28174

    WordPress eRocket Plugin <= 1.2.4 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in eLightUp eRocket plugin <= 1.2.4 versions.

    eLightUp eRocket